Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 14:18

General

  • Target

    062cede86355998ea9d3ae301444c547_JaffaCakes118.html

  • Size

    6KB

  • MD5

    062cede86355998ea9d3ae301444c547

  • SHA1

    8d089f926740ba15891d12d3d060d9da7a40a95f

  • SHA256

    66fa614aa15f2f879af7824221f5f476120cc04ca27d596f88953cc8cdd8ab70

  • SHA512

    01f1c4245644b3c938f915f4992cf8a3ebf44a48c4b38bbbbfa26d64a65f47e866a5acf45c23a93f3c6f533c12456cdd23a425805dba8715bf3f20bff3244f86

  • SSDEEP

    96:uzVs+ux7KWLLY1k9o84d12ef7CSTUV9k3cEZ7ru7f:csz7KWAYS/4k3b76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\062cede86355998ea9d3ae301444c547_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92279599c05f8ffc16c79d353ab53e86

    SHA1

    96c15030842d35b2b582b3ff034f02b0ee28c115

    SHA256

    d19e194d815567e3b4af59b41a3e3ddab36b5b47082b6b4ea5dfc943753e6466

    SHA512

    250e708849f1f798f5bd9df662a7b7b7946bd865e4aad19574e37c9b168b9ff4d4de345fd8f2c520e6ff4e347def2870d76e834d0c58f73f65e9a80c86bbb67b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf320188d4bb336d479e9f2a5a66a740

    SHA1

    36b303b9b3e17bf3f07a888e5902d59f074e145b

    SHA256

    9d26c2a7a588f078e8dd097cd6b3ca939e7f33ed7803036a04bd8533d49e79e6

    SHA512

    9eede9c7ee5b7b4ad5f0c7de0e3e13114c37576ee7b6d5f625520f61d8c07ff336a0f43b4b8e87f3549533dea4fc4734dc9fb8e659759d42bec5ad10448c539f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b234bc1e73cb5a06c5445355fa759a5e

    SHA1

    cacbf4b9bd19bfad6aaabae25232fb35afbe3d65

    SHA256

    737159ff2ce730c8cc88eec0181917646a41566f2e650e1c5d25b18b02a88eb6

    SHA512

    b95ddeb26a318822237723625368ca92a129d3868acffb22c1fd9c455a71b9ec74ccc6f2c675cc61f5f103596f32737326d7880e30344c97982b062615b92417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    609162f044d8e026fd206d20dca10365

    SHA1

    9eb4f8608a500c83b95be04c1b14a993dc4a10d8

    SHA256

    cc5e35cf81145c2abb02dd5abbbee28ba12fb48b86ed54577129d4e2adbc29e7

    SHA512

    3211cea2f50b6142c2d06c59dc63310cd8d4056342acb2819e611ef3a9b9db1162144ac8130640f29940e7a8b6e44a7a4ac5845b76498705c061de7689700a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d235c3deb4212aa9ea8948fa088480b

    SHA1

    914db0cbce83107963afdb72ce1c2794f494a6bf

    SHA256

    f6602243e4ef71cd909a159fcb8180ea4e32cdbab0b7813bea2c7276591c97ec

    SHA512

    01e0b352dda320bf5a6a1dd8e7addbc77a18305aab107dc4036b71e1328a071fad98405140a9445ff55a1ae1b9abd3b4fbf68e56467275f9fc5400cb511b5f62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    158712df08b619c8448011664c8d3246

    SHA1

    7cd4e7eb5ab9883315fc856c8106aade1dd3bd7a

    SHA256

    823076491f359bf3aafaf1ac14a3f06c793e6f93a7ce6f4ed7bfd6eb72351df3

    SHA512

    910168eb8f562d48c59c33d757ec5f0be777ba78f4f99e170378072d0f8e8033efd6f97fa4ef941fc7c40fabed082623d28d51465555066100eda4c562b9c9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d2924ad129e2349df5515e218abb85e

    SHA1

    39a365d7b41fe7e0d77ee7da9c6a27048a2d2b3b

    SHA256

    06137c3439c845d3a28b824f78eee963c1d4ba0eab66425534d91385c262fe01

    SHA512

    9ec63eee25c7ca22196ef5f643bb56f82c0f72e65d74ba81d32a7b8b39bf835b7fb6eea9eabaf9fe3e876ed9fbc6fe1292979cf0913f3da8587bfea7458c32ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f433ee7e5b11966bf0db5ac192abb4d4

    SHA1

    58816bbd4d2a8835fa5253639f48c211e5b1cd3e

    SHA256

    65ff718185faee8463b8709c35a58b35a33401cb875fbc4de0124705bec621be

    SHA512

    e0f2aac91dc622e61b085b455732f17e3142f1eb08af4b4b32fdcf7d87e51fbd2e6b54a1dea298b350aba2a89627a380d38803449d1ba20ffbcd8c252873c4a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e54724c099851be7f242e4cc192b1fac

    SHA1

    6ec5bc3f811d6313507fac5e2ba872cce06fa0d1

    SHA256

    e021012649d4b5a15fc24c306fe716a9ef83f4eda2f632438b37d8a866c7ea35

    SHA512

    d6b55cdf2e80d39a95563be9ad913b4152d4186cfdffddd4417ecf370316d1b69c54cceaf0b82c8e7d28386f4bc47ea4c99c604eb3d597e0439df35d28fcaac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6fff1c7869086acbc3ae91989d22ad9

    SHA1

    67be0e2fc0963d9c685de7ba006c1a7fb6b33b95

    SHA256

    bd06761a781abfbb284eae1f8f2c7bc086fa2da37ea0006ac759caf077284794

    SHA512

    d0dd379eb1f2c8e2241aab9fe22f956fb49297f86cefe7a6cd631feb22859b426a0d9775465bbd1eafd4ad747d311920ff976d5acdd8c5bea15188dbf7c68684

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    659c7131b1add4ca419c4e43e74d30e5

    SHA1

    0453fa739e9e6eb0c2b4cded4117d1ed1361d277

    SHA256

    999a7141c6eafd13f9be84fd356465345ff0d846e601ed1a53d593d37a1673ac

    SHA512

    27ed63f9b321d282bfb764a19724e6257167e030d42acbac358a5ead1dbd49f97b26fba6ad24a9f78fac17edfd8a724e971d30ae4868cd458dc42e01b1c5eb62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a152ce7a0f7b28a9a4630c0dea5ef5c

    SHA1

    1b7caa18ac57849a76331261d6147fb58c7aeb0b

    SHA256

    755c526eb66e8eadbb132a0d8e33599db0cb60120effd459a4cb1464e89430af

    SHA512

    5a7dd394f7f45284521289af565b5fd904f5bc597ae03e510d0775826a3ba1a7e8ee769c489282d6d46d633f05c36f7bcaadc5bcb5dc53401db52d27d67213dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    244a21d0994bd06923cac30fd0e7c915

    SHA1

    b596f407c0cf8e51c4efbfdf2485a44c14d3af25

    SHA256

    20a20cbbd4c78603999bd0a20dc02d33c81c2a3c37a293cf6c89abbead5caab6

    SHA512

    3d7a42aa7873006392d7e30a6df7a63834e228d3fc08399e4005ea6b22a616f2b04a13067bb5802a0b6c4dc8a0d0cce2cf8e4b8fd03a2b715bb4b78238061b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e33ecd130b165226fbfe7ab761dda940

    SHA1

    783312e1f0057ca109d4d81c8c38e23ad44c8195

    SHA256

    42e556281cd9f45ae936e8dd3145a5195e677c2d2a996acb9eaa97564ed4f08b

    SHA512

    1bf161358b567c28e6ec2ba06ba501eb47c8e8e2a6aca512514e67dfb5e79ff1afb4875f468aad649822e82ede2a781492e76c8527d5aa06f2ad5acbadb3dcd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab003ee614276cc8b54e880ac2536a01

    SHA1

    5ccdac96986a6508af8312e34caab9ee63ad48e3

    SHA256

    fe4a15d77ffcb3342fb9c7da629bf9861e1a24e6c44ee130c05de5464b017d45

    SHA512

    9eed5967ad224cc7a24a4aa9a91dcad8b21fd2653998a2f63156a2c7ad15e1eb002cf24ff683a1b4ce06e54217e2b0f54024db982a0931a66138023b5d4d0d0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6bb454fc2311b8ec401d4bb77d226e0

    SHA1

    246cd28e19b2175f2ca94c2af8a73a7751453589

    SHA256

    777a7d7ba441c951c3aadf4706596907030409b53cd9ca02ea1400ad07f91928

    SHA512

    a8c75ba07ed4735e8163ae687fd107f7208c0510b7cef4928111caae8f1e9e9851458531462e004cc84dc0bf3d4e49e02e9b0d60144156b4cb1d4a6c73ed52e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b031c290a36144c71ee900fd1281b2c

    SHA1

    86040d8c46f85cdb020372ff37843f9c0bf0a6b5

    SHA256

    9329c47bb4ceffdbc61c621c1f480cba3d7bdd509dcf966e8ae35cdb1009de1f

    SHA512

    5f162ba889852659cef70980cc8a988c9ab9bf7605b8e6fa96fa8cb7f9e2a0df3ecfcba487f5548cbd82a9352f6397acec717982912f1a005bf3d1a3be8c1cd7

  • C:\Users\Admin\AppData\Local\Temp\CabB7EC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB87C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b