Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 09:40

General

  • Target

    054b34f1ff3033aa98b00e543a1dd9bf_JaffaCakes118.html

  • Size

    139KB

  • MD5

    054b34f1ff3033aa98b00e543a1dd9bf

  • SHA1

    8ce0cb372164a9fd2d6b3761683a01dd24459145

  • SHA256

    b2d3f9f07772abbbb23699b96473a215e616f32c11f1e148242c022ce2541cb4

  • SHA512

    8b28fe25ae68cb62945e57dc6d312609db6ff01c4c7bc33eafb1e87954c6b4b03df3a6d9a330051a8c992757b37ef8c49b06f237d0ce624e47e2bd946810d4e1

  • SSDEEP

    1536:SMNMeDBZtyCnEOrDlUZtyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:SMDgyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\054b34f1ff3033aa98b00e543a1dd9bf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1744 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac11b247c153d6c85ef8702862c4932b

    SHA1

    edf24df0a883a1f772fa28b0a3e0998059b93d5d

    SHA256

    567044ce48fb97863ef0b388d4726bd971afa52c1f1efa3d5089cc0e6f9ca3b5

    SHA512

    2cfde2f50597ddbafa22d919606179b93ef0963de4f3be31c51347f994aa54c9641b8c0bafb6753d1e2ec3130ae7e3abf05e909c961f0b5404e4ab1f96087b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52f87bf4d466dcf69d07e6730c0887b0

    SHA1

    1b654498272c6a1a1575122014f5387a25054246

    SHA256

    f7b03046cc06b293ff3f9ba129769e321eaa8cc92b2807070e824e8c363ffbfd

    SHA512

    61f3d1bbfbaf214142d45a8a8df44279bc710184c15cd7bd252dfa590cfc8118b5dcd3e75d04c90f236ba222ed73338de8f31cffed919d281f6deb300d1d51ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020fededa659dd210d51ff3cdcaee8b3

    SHA1

    d0b6672cc3ece2348501b25b5b0029223e3cc263

    SHA256

    c9585af767bc0f12e55a91db6acb0782ce051d3f42585af63291ff090cf501f7

    SHA512

    99977064f33ab2c226c69c270483be1416b83e01b53c675f4dd38295b39cb1b94348d0fe46c3b541a60bad48f093092cb63feadb60e2276681a115902316bfd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aedbadf1b9efaf063ccbcd2c420d1f95

    SHA1

    60d3bb47b8290295fbba5f240a664e926356ddeb

    SHA256

    1f946fef87367a222d3a9d47bdcf262b00a29237adbe4c4605e4d86adaf6eac1

    SHA512

    9a299c8503dbb64b2447f8b5c09e3ebc443450f6d3004280e69df4f554ae96f85da5bc9ed36606e0d1bdfb98900c02971821dc41af4c510b375e14747cd0bfb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e94e253f9af83177f131ec60fc16a484

    SHA1

    8a15d987155f2b915b70851188917d86f6336456

    SHA256

    371e5d4ad3843aaab6333fd38b24ca588187e6ba6a4ec930e1835bc5048dd336

    SHA512

    6396210dc66f6c06490b6b99746ce3e53ecf648b6e35b63070f0a370494b507445b97b621e405ef6f02bc4476f3c8346d065e3b59f7acf69be0642e5dd604f07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d712297c88c4af9c007c04e878ea4756

    SHA1

    0f76bad1f86c4e00011b49619ed924f921885bff

    SHA256

    dcdf2dcf113c6e66312c68c04c288e494589c2b46ca8d4898ce8883f0325172a

    SHA512

    0571208a5526f7843ee199ca076b6becacd3818e7b44251e25d0b0c41aa5eaa7114248c319dc2e08d92cd397f2d466a0e52ca71333c8f226c598efad85e33d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99493697a4a93353ff6ab5bf169da499

    SHA1

    e6fb3e74f5d52d45735750f1befee93cb0fd4f45

    SHA256

    ea1747a23045403352f94f7cdc8b725d3dfd7d1484c083ccf0285634b56e89f8

    SHA512

    30764fbd6a60f697e63991bc691781263b7aad876ce6ee6c538d055a45b2d6f6def509eb5ef1497502f5c3f43584db69bdd0b500d25cf3583762fac6b0798a33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63df2d730c2d20c8aa90c497621fb162

    SHA1

    246bd40858144b42b18ef24be0869388e850a01c

    SHA256

    e82964091926d092f186ab239cb3235a146f22508fbf986f731d319d5040a9ac

    SHA512

    4fa3ca971a314791a5655ea1146489f1269078299909471389399d4c17dea8272fff2ccaa42a367d8865f62b6d4597966ea5279b2906deb4280e2fe2fa78aaf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d51637210199cb536ed0f7543baba7

    SHA1

    e3ecb959f1b9ec1f464cb9e9f1b490ae537ad80f

    SHA256

    27cd75c95f9fc86bce4237b14d7d6eb980d1a5881c39a55b0f67b8b168ef976e

    SHA512

    2c64ad106a9e7f91c3c3091b0d290a75658d6a91c62b5829519b147ea1a1617ba3e86bdadc98f34b46a47782c39065ed804441609c25f8dcd5943f2397254057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bba4d119f2e7ce09b557cb5af601c3c

    SHA1

    16bc06e302b47e5ef85103934c7300a410461d67

    SHA256

    668787971b0cc00704acc4f57d1f981a23b24efbb3d3a34206d8ebca52badb4a

    SHA512

    29d2fc01d04545b370024e22dc4edf88f137b0a675d9f2322cf801cc1990fb34e6a2a16b166d9e0e53fc33985a8406daea83144fb3d18bbfe127a57f484393f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56d552ec10b286f82d5f6c88bd596b51

    SHA1

    15839b1815f6c0e7330208fcc8ec0d1a52f679f3

    SHA256

    3ac34bc5d79ab7dd5e9becc06c55a318e9848a75073481945ae8e5c1fa4879a0

    SHA512

    757aad6f118229e33c80f77ee89f5a469d59131458d439324b3c363b5666939234073a9242fcbda775cb933b9953da34479f987f714cd41cf4ec3d02075eac74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cab1a56f0009589d491398958fd14ecf

    SHA1

    63ada2cb1bf0ba3f8b4b4bcb0ce5a25bfbc431c4

    SHA256

    1c221e80945415fe0516f3ded9903a709c60c297481190e12de3e3c7aa1cbdc8

    SHA512

    47e3bb569016e3b4b65f65ed11a194f279b4634e3214babcaa5dd1413b9b5d33d9f78d9ef980376053c3e61ccdb1fed166628acfa846698d30a9072ed54347de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee75bb4dd49921ec22943af35b31edcc

    SHA1

    1833ec31b71249b3c0aa9dc58914561fddd02866

    SHA256

    f77f3b07b1907040650ff13cb29272404e90902b0d6ff52ff59e9e31f5c782de

    SHA512

    2ed4e4bd81069f05d4b8119543f56ca9b97cc97c17b3d83b872b8f3c92749d6bce6fa12036f96de0aa961f1c2e0ab7cd0494e74919e0357d2fa7e4d863f7067f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfcc41cde6619640bbc485ec6668186b

    SHA1

    1d33ccbbeb1a27ae2ade8bf066d0769a5fe66ce2

    SHA256

    4caaf1cf5be61b1edee6cbe2ad588aab837974d8f4de3099de18e688f71d5c0e

    SHA512

    8fbb89756ebf7ec6c56aa77a51635030c2149f2d7db90382205939624b49220b716e83eeb37c15184d1021d0f433692d253d27811d94833b0e393d91b914dc11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91a8171506919bbb25e0225a001b0b01

    SHA1

    8087d88d8ada1fa2c392954173b1d916917c83c7

    SHA256

    bd6ecef6e6c637c5fc100a4b44da30b15449607ef797ec1b00acc5863fb631db

    SHA512

    b11c245964eb3da94827efa3aba0550af6e203c57d15495bc90d361f9922c16b4935f0f7c4461aea28ff97c0db287bc21e7ea69863b8658f8aeceebb01d78ef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00f339420ede4dd7160442318a8ed691

    SHA1

    8ef78b11200a0def880057c0c538cdacb91e34ad

    SHA256

    cc4f8aae7d4f505296ff6997cf16384be54c9d4ff3fbe337666d01eb14b1c26b

    SHA512

    56caffa229a827f44e3b2d58cb29bda69a1c6b72113b408fd883b13f0501d1749f7496edf76620467ae2c9a5c756126fa26bbf8c2a538ef5f9350623bfac4022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f589151517b0d05cab5178db20b7d571

    SHA1

    9fb14f11698d96f864fd787ce72fb2ca7a13e204

    SHA256

    a26e3066926c1bd48a43c237a519414eab18a932a314a22023484a57efcfda40

    SHA512

    8f5176200605fdbe5e0605149b367b57856abd0d4ea0e7328ec0c2dbfbd3740b4227316c3ff53e05e21a3c482477fde70e7f676673745d5055cb14016efa7b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78d6a2fd9adc965ee7bc8ee196d421ed

    SHA1

    63639d4e34cbc97f89fc0c117c6995fc7c751ef4

    SHA256

    0670139622b601305139203ffc3963a6a984d0db106038fe04b02cceae50cc13

    SHA512

    3e4c99ad34f66c00741a58b5ce375b016d41378041ab50020686e107625a91ebdb9fc1887ee2c2994a9c93cebbf4d38679cd89cf44ed33dd6ed7daa520857d7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f84ae41f6f2bee456fe3d6268ac53d7

    SHA1

    1cd109f8662fd3c24fd81d3721bd093d895441cc

    SHA256

    b7bf864f079fe48425103bf2eb6351ec6f094be7dcc88bb5ec0ac28213f686eb

    SHA512

    2cee8cc4f4f77b1ffdadb46d0ee5d9f8834bedba197af813a867e2fa9554b637a29d11edfa43efa5d6b003db5f4133b6dda3ac16dbeb2bbead84bdcc310566c2

  • C:\Users\Admin\AppData\Local\Temp\CabE938.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE989.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b