Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 05:03

General

  • Target

    0475d14b0476d347fc1c476a8f12f606_JaffaCakes118.html

  • Size

    95KB

  • MD5

    0475d14b0476d347fc1c476a8f12f606

  • SHA1

    6238a11bd20726c91f90ddd16c2ce5fc97711e29

  • SHA256

    3fe9345cf5940145a1889d1347b863573034fe9a6749903e2fca42f8ec618b21

  • SHA512

    8c2546810a056564b84b78581acc47603ab9948bb17d82f1410fd6ddc0cc15848e75c99649def5da9b66cbbff3a825077a61d08a975e99836c57ad30b60f31eb

  • SSDEEP

    1536:mux8iWQI9Gth8Me8keYVeUyeI5ePIPYnDzrnsXoaAAfab9iHN78Sz:L8iWCAAfaxiHN7x

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0475d14b0476d347fc1c476a8f12f606_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61396925ab7507d548ccfcaad62be422

    SHA1

    a9fdd025bf75dfe8f43c4ea65e1eea026afd4568

    SHA256

    b016598ef970c217e5bcf8717f33688c204b7e4a7c3fa481ca03a71e1c2c846a

    SHA512

    4307fbbc650ca70666c9fbda4554da842ba321c0e536a8431f4e972c5949501fc0e58057f40ac23d74e5da929571e1c838ef01b55745540f4130525e2eda19ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d319e4961580c7e4cf4f0396e9c878

    SHA1

    825d56f8d4a398b9c075ba04be6b25b906fd5ed9

    SHA256

    b355db801ccdeef712a529e1dc76531502468e4d11a6155129b146bd06ec6f3e

    SHA512

    15e2d81b09e796a5922f6c634dfa7a13412930479670410780489b79d79e67ac7eff56ce47105c307f1ae6c70cf4beeeb6065a504a94a04f485b763d790af42f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    699658f2d633ca91a26a0e381656cedf

    SHA1

    c398418ae65469c0cec1ab4b8a2fbdbd92fe9b1a

    SHA256

    736a046a4e5a3821768207ee3e61429db49532420436363bc67efffa00ae04f3

    SHA512

    e111f91f0e56f77377e6013f0ed024734f4d9d829dbcd7d4e0a4f709272d295b238371a6b4440bcf7c39d9177193e85c6cdfc6a1446adcff2bb5304eb5024b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8b19cdf61387d83f9d470fb7928819a

    SHA1

    e99146d5fee51d567bebc55b7bbc1e110948cb8b

    SHA256

    801552ba09121614cb62d82ba55bf605b3c01820c6944c746de3b6f7c50e3c6f

    SHA512

    5f09eab4940e409be8507167d3f56feeb2edb7b09339b3ae74ed3dc96bd38c1238fec6c88e2abf646d3f5e04c136fb427f6ec518934791fc45478b451c78346a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7b36780c09be55083b7a1e996a8b893

    SHA1

    ccf1b1b832566c53b1ad8f0014cc71d52be7e644

    SHA256

    db205036b71061ebafc9e71d46fdfd0be904c168cfb659a5591300335f565f44

    SHA512

    0df988b80b8c636df50ed2670ff42df66b2e4b43122a648f245cfa9f2b44031d3fc551dd98dfd963ab9d81affb976cb5fe9b03297b3a4dccc3f96802646b0c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0ab5a62661f810f82d06932faf1d7a3

    SHA1

    99283fcbb6b87432f94c7e451a6fa5854b2420b5

    SHA256

    f7e52796ea88a4fa0e380c8b90eda873012a5959013cedb3bdb20445c26e29ce

    SHA512

    9474abfcdcb5e039a6504d2d4e7a9ae5c375009c5686acc6e5fd732448036a3b40e5db0e25fd8e7b344fc04a1568583a88d2e969882deb7cc167d3f11b181474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c48872acbdefc388b473430dc2d3b2e8

    SHA1

    6b219cc68b436e6c7b5754ad6df8909b65a505c0

    SHA256

    07401bb3cf1b513660af8b99eaf5ecdda66feeabbd685105ea07e59f93286168

    SHA512

    879cdbb3265d50da2cf94fd9c8b31f021b35a279d721d8b244361f3541c08cb29e33aa1f0e5f6f67385107d1c74d5baaf0eab03c02928b8f6a2fe37e2df26709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dece99a10e941f5a1cc7ed87f3dcca2

    SHA1

    b89e75fc3d7555c1840e77b29f1d73c43633a1de

    SHA256

    ee73ef2085fafc871888b4d671616c551ea067bd9f3df80e7d4d7e0c1c3821c0

    SHA512

    d0c62e6e053ee40530775f9bd58e6ac871a78eafca3f81a0f61c75fd9f54cdc37c466ed535e714df3f33e3818a6834eec1472540a78712d3eb44500187883770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03dc8397fef42d2a8b47bbef5f59d405

    SHA1

    a5fb081cdbc591128708d26ddeada31da9fd4305

    SHA256

    b6cb08a780dfa13424c770a9ea591522dc1b306ed2caee06a727a503df008379

    SHA512

    6664892e03095afb7d9e4f06999f4f969d4ff7c74fe7ea39e60c3706ad59ed762298c685ff5a9449f19c362af1325c5d504f0fec4145e725a18c1d2436451c0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52f3e5e12a51b9ccdea91e02a6c9c941

    SHA1

    51b212a6e070301ef09917a3a9d670686a506fee

    SHA256

    9e62b6af792125574b2e3106ff771524fb45ef097a2c0fbfa609ba5e3a9b390c

    SHA512

    97c8d7b6e4171d475d97c230dc1963a81ba3c9a9d269f4d3d13dab63be85071ef7650c1ee3296de98f0119425b129c901448cffb2fb49953cbe56d3e00108300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e8e83a81b65f1644bad564b665c19b3

    SHA1

    1efd9e8b2d6c22f2c7ea0d8acac177193371a9e1

    SHA256

    bbc48601c22224d2678bf45ca555e84bd2727f5a244f0d0df01783b85b76dcbc

    SHA512

    19161db5e7d9e7b7f7e65dc00d361d6bd9d343e08afb9ed14d92bd90efe32ec9de29560e5088eda6e5f4839ef4f592f809d393d258befe9a12d60b55280e1c92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cdc9da4555553cf379c232727a31514

    SHA1

    7eb3201ed8bc7c33978105489b507ca8bf692777

    SHA256

    660e53063fb7cbc32ee21577d19ae45035fd4f1295e3ba0c8ca79f7d1371f728

    SHA512

    a9e96716143bf2edb17aa2dfb8c648c902263c98fe2e84e089a538112215ad806aa779730d5d80e1b733732f765e7a9fc6c51946a5a34bc6bf07df90e00d6c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c65646b4924eae364409d30889eee013

    SHA1

    449e301d1048e7b5ca287396a1c2c3f25b2220d4

    SHA256

    0c595291fb9d8c091da32dbbf89fa0cba090d8ddb8d1279fe29c3957e5be0db4

    SHA512

    ed116a400de9212c13b64bb449a421374cdc433132958d0b0f14afdf4c1b2fb68953385cb226e71f172fdd4f7043c35e9a8f386af407cf0274596e6ef331d2ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f6c79bec5e09b10981c38574938fb7f

    SHA1

    7232257d57b6f22bebbde883160a74524961d5b1

    SHA256

    da8b65982c9b0f0e9934db09cc315216d5d596db29405d409d2ac3a3a47bdfe1

    SHA512

    6b2c5bf66ceb36ee7d774f846b6953550c2a2d1956f8e0f2047a70e8acb7bf5dd649830c2e922672946ee8f26f6deda532774605159e5a40586b573f7a1746c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    847d287659e6ed701d3671b481aa0679

    SHA1

    c3beffa33e2e0abb4f73bcec8cb0925e2172442b

    SHA256

    aa50d6c7c57e18c55627f9b3079b419e446295a07208bb7171dbc72860ad0fb2

    SHA512

    db451e279ec3fddad3340b627a72f7db1517480fde2b8590741095de8271ab30d4442f41345837c2c88b76ce070ce1d8d714f65c922b9b709fc17b8f184da127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ede915fa94871dab842eb27e15bbaf2e

    SHA1

    2123d0b83dbcabc433db3b307c33568acf6e5ba9

    SHA256

    871d8eadcd89db536d400d7b8d04a93e07aee4d548156e1a2696e2bf5a53ffec

    SHA512

    ce5d997e597cbd914beeffc46d3638173302cc5840008bc6d33d464d63e129fd479fcb0ad3cb67ee1baeb2c72add1715d8ac455eeb968de3fb741227c3c93961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87750fbf70a4c30bd6502ef4203f3b95

    SHA1

    8fac1c7bcbfb6f7137a7e6bba4ff8a6314ba880e

    SHA256

    3c814f52aebe641da3ec6d8074578210bd71fb408770032c4161bc8ec3bccee9

    SHA512

    cfc975bfc809bac22def10df12423ddbd7e11a3078588f2bfbd04888154c44a6c629d7fed553348970dbb75c572c3980afeca3234badc32e0299e2c80d39736b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c98dd28707a72a6baf5d35993c78454

    SHA1

    fe73850deca9946235553aa8aa7f2fc45959fded

    SHA256

    c08441f88db72528d8b6f02a1d84fe3944ad5fa91e8cc602e0f263863b307fdb

    SHA512

    4ee381aa05b16373f170c7e422f0a1c27c232d5fcb1d7d301aae88681cae2ad37e4b8b05cc3b9baf061caec56eb6a9c3ae32d7c988b58140ae862b03f55fe2f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5fa5a234ea55cf0487b534ce62f4e9

    SHA1

    154dfe164705301c19b0db96389226d34b7507c9

    SHA256

    63544d1f432a81c07b55e4468b88f294f97a099751d6be0b01a4efeaf1753631

    SHA512

    662b86cf65cc8e4456331136159cc1184436c4ffcadd2e753eb45b3f7f4d7c2e9aed4da9cd996a52cd05816c3d7a923387d3360488c08ced31063c1b31acbbd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76b3d7873d7683eb4bb279492ae5cc57

    SHA1

    d299d3208cd1b7bbf5b3cc4171b416d8c358fbed

    SHA256

    4d3e1045a0b064a1c590adfd6eb3d332226e76708e04c50561ac7ac5efabb3da

    SHA512

    edb908c70143495a09a6a7e863911ecb1d6db89d359d79802835ce5df57396897666f70764a031e5d01b3bf8f9f5abe81813de44c710d3418bcdce1d691a90e9

  • C:\Users\Admin\AppData\Local\Temp\CabCB3D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCB3F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b