Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 21:14

General

  • Target

    07724ab609f2e2368fcf3c993dc1f4be_JaffaCakes118.html

  • Size

    32KB

  • MD5

    07724ab609f2e2368fcf3c993dc1f4be

  • SHA1

    e1fedadee486679076aa18f80d82c082e1456ff2

  • SHA256

    73c0cf4b601c99e8ef03dafc9ff64b8f68c738ba5ce974554bdadb2d50187df4

  • SHA512

    5c22c720341e8d6b56526c2d17d978aaef051dd1cab5babb7c2215d9ae79194f1c2aee71f5134765c147a4ffd559ec6255093f0973be4b7bbb049fc57621adfe

  • SSDEEP

    384:sXlIcytn4PWGTHVWl1NeCI1lm5nakto9IATGJTHlSqIhOl/gcrB18n4VjXlb0SAP:ENWHrylWnaEJEigBchAxLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\07724ab609f2e2368fcf3c993dc1f4be_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1072 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b9e2c7490e1cf7c279edd48b1654d76

    SHA1

    63acb9c4ad9bbc015e4c780f7af64df3d9f0a676

    SHA256

    8ed85a450b27372cc3821a6ba5b39742f11580ae554260e7800dbba516fd3c1d

    SHA512

    09d35163a7f253f38b6daafc427cdb47b36732788dc2a29adc8d934c67dd7ee16a18bdec1696f92fb0190a1c224805bc77418df275de4b0f6fbd6b5db9af73e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9e4f94e2fa767f77a621f6171ae0c1d

    SHA1

    7e4eb2b4cdad77aacde7cf3a8decb228e1e3520c

    SHA256

    615c44bc50c87fda78beae6b6896cbdcacc8371c458f0085240c16fca5848699

    SHA512

    c6a87f17ae17a5efcaf2546a6577fa596a1062fc270b78bd5440213da09c959e44535356715d64a3acedb02e2132a06dfbae6f9fd7e613ba0ebb575ecd2d65ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad12948772feb80d00b7106132ec117e

    SHA1

    073e2f9135e823778166c257f1d197e5bc6336ef

    SHA256

    d06028a7f607392b62800107928c75e4de0a7a15afdc993fc4e4fe4e4f4dbc4b

    SHA512

    3b07e94864ecebe390cdb726483a01516d95bfdd9fe1f7e62a6953fc0c2fa1845fef8c891098d66271f70040e3a97a49b1476ae6d5ce722eda2621ad4ee0a24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cda4578fc4475b088f48e0365ff6a19

    SHA1

    52463fd12df1ad8335a3c3047821a08c552b8bd4

    SHA256

    63206afd12f3885312d82a0145323587b4460cfb7265c0ff5623b1ea87fe8883

    SHA512

    cbb81aa86551cbe1b4bca27d7081152385e1f713082a0b4897f5289d93ba5580be744d1df40b8e5dc6815f75d4372570084f7328389d1c855823559b301a1d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4562653f10fd1d278fddeafddfa8a586

    SHA1

    3caf2f0e44427fcd86d8c03a9763e7adeebdf55c

    SHA256

    159c620a41cb6174fd67ad9f41129e8f021b88977589a53eeeb4797303f9c200

    SHA512

    25d3e71f7c6c0e942968beca443cc190b7cf3950fe37260e2aa0dcf4bb9be253d034c3041a56a4e5b9ed359e549d87429b6b1abba2e69311bf956971a6daf854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6001ed74e5f115bc2ceb551ac87a0977

    SHA1

    ec5a13e0beeed5b385fd299a0146698c13451bc4

    SHA256

    cd9f73ae1f620411f0c1974d5a72418fc0ff0839907af9ea2f85da08b93d8f67

    SHA512

    7d5da9611362bc46c5ea659b0fe944c28be55d55228673bb23f53975e2beddd64b9ef4364efd0d215b948926353fd640471cb856a9369807192f4723b9d4670d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eba45dd324750834629d69196c3d4768

    SHA1

    2001af9a53470fa858000a3a55b3279b1cfeb093

    SHA256

    6dfa07618008bd35512f2c5dc4ef0df7593dbd7c99326c4d80d78d6ab2492050

    SHA512

    041b4d848599d1aba0910c19b86ce04cd64241d331f886484fc46393270319689ca169dfec6ef5b907133e7d2826c1fcd5a915d797cc7978b01801fd53602472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3695c61b327a5084ada26410d41b56ed

    SHA1

    bcc27d0b2af47a895de67830b0c35da7a074416c

    SHA256

    e53cbbc7e33b0e7a4e0b6ce6bbd0aa7d0474f563ebea67ed7b0caf6dd193ebb8

    SHA512

    799cd0d754eaa97c7332116f7afc01c0d93ad9feae5466d7f4f0217154dda9cf05157c295f84ae09de5e6c8574a95ae53b3811f052b6230b84a0d89504f5fb5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e837bd6129853aedd7b48321b9bcb9b

    SHA1

    190c9bff0ffb23111724c0226e02ec7b246638c2

    SHA256

    0fd748b0c55e37decc5dbbd5e1561a38df3078054b1a41393421d15efdc33957

    SHA512

    cfb3155413e39bf188317130289629ea00fd7dc8dc4d8fea0339dd8dcc1af825483edccf3619706058480a5d1bb11e8dc9ddf82132630a535e12fe8752b872fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdc1f2994906eb792de192cae8dacf81

    SHA1

    f5a66c8d33a5796d4ba142528f2c1d89892991fd

    SHA256

    c6599cb17f66ec24468828a833386867389b2b88d6ea30743c0c8039c8e346f6

    SHA512

    30f621a4c6fd132aa8dc594e077106443acd787c07e021b65fe0f6e60da43d9d01847c352ee0278128161622e2b9a7d84aa30ef5960a9d806cae6c1095c0086e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904d871634ad199d73f1394c8319634f

    SHA1

    51f523ab5cbb6636e240f1d1c2c4d0f5f24ea99a

    SHA256

    6eb34721c59c6ae6aff67a0d7da77c71b41367aed519c21f2387020e85e540e8

    SHA512

    ecc6c2a601a44b6c7dceb740cb2cffc32757102a75571203120ac162deb5e1e700f6469fed649cec9a387a55ce2ead762dfe0eba5e5539e138e18e455c725cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b5c14e3c7dcdbcd7a5bdeaa5fa0fbc6

    SHA1

    3c5edcda1881667d719ca31115ef2c9ef69f1a5d

    SHA256

    5adb700a50eec8a6997d4c514a07562c01f385cd44d8cd6e0263aa4d7ac3d7a9

    SHA512

    0c986d4e1a3aede561c258fc63b4ff0c27b18ce768bcb1263ed9e1f4a9563f704fefcaf1304fbeabec1a460adf5624c552a7cb3e37905a2a5c013704606378d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7b40e6cd40dc350712455603d7b1c61

    SHA1

    796b9ecb65b81a8088c96468832b2a83628089a8

    SHA256

    7004d07128f78a719814f18fae2d9699b507d697f9f48218d401a63c6149bd0b

    SHA512

    0e4d32ac0a19f5f28454ce9d5bce7ce48c46e9e9ed30d9004f602f8cc587dcf925f2212ba2c7ea85c522ffb2f847cdbdba0af28a0f73283fe54112a43b51edfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bff094131d7f3885caa94a19715ad4a3

    SHA1

    6239da4d637d145a14f28cf9e37c9188ee250b09

    SHA256

    b3ed9a3e0bd86c22d98708faa1ce86fde94ea85c9cf708a7b4cfda1aa421db7b

    SHA512

    bac7c366be5ef473cd4dfa352ffde782a174ecdc2646b51677ac4701555ecfe128592bbb835b26272a3d3cabdba3b1a42c05176e59e942eda145437cada21304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b108c0ae8ee37195dfc1c4d8d04e7ad9

    SHA1

    ff69d07f0c830f7980076cf3fd1b23c0c4725113

    SHA256

    c53ccac1361a5dc4a848cf6505cc1277cbef1b9e2ede646c4370f95d108aea7a

    SHA512

    ddab58219b4700851d767ef7fb97f6a0738a6519a4fa0cd865c11fe400892a201647ddf2c0e89b601c787e3a4bc098e90e1377c4d9cd4cfd7e87ac2c10827b94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    576aef7c90838dc0e45f8e421d9c5747

    SHA1

    2656760b704d90bd0e3efa51be1d31f4d32229b4

    SHA256

    0f4848c62ba94ada2f87c2f0e1800d0f5f9ead74a9249887e7161f37b4d1753a

    SHA512

    c2b4438c2715bb0f64195a19bdd3714c28f94e4d0708b389430fce9b2393f98aa7af6480ffcd6c8befaab4db305863874411be82aa7f0e326f9b6d17a977a075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffbd798b3f4beb9c443d8298966fd61c

    SHA1

    b83f4192ce2658d21d4727c6b9d602fafddf07b7

    SHA256

    2bbc2b55533c2b51dee0d408ec7073d74a30a2946e62190615984bbf1994125e

    SHA512

    fceae70dc735066e5585967daa3490ea656e260c362307b159dac6892d71f5a38dad01a352446458ea41b769cb5b67885d338f0cedcd2a75cc1f6d683056b7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb282b10f2ed5446966ab351896cc09

    SHA1

    537fef1f9dffb724e53c9a92f137de5d446c56b5

    SHA256

    4ff475e68dd609facca94f3ecdd544fb3853ea1cf32c840e8a14d9ff6b20ceb8

    SHA512

    fbb5c3a9216562ac1f00f124b98027110300448189754210ddf66164b343646bdb7eceb04915cdf62c6270193949e45371ee1a64a8cc836d5bab65ac4fed4555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c57424a347c3cf40af2ae7184a15c75

    SHA1

    9c0c985a304e4417e8d34cde6d7216c6180da63f

    SHA256

    f110874d4b813a399b9bbea055d911388e9058e642430699f921cad5fab35e58

    SHA512

    ad78fba657cc9393f55af46cf83ddfa4f7c55f3480cab73c7cef46ebfd48ba6c69eee27e9d990ca99c5989158e47933962a176186a90bbf756db88c88a04c252

  • C:\Users\Admin\AppData\Local\Temp\Cab2B27.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2B8A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b