Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    70s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 04:28

General

  • Target

    08e2fe4402461de6883e909fce683543_JaffaCakes118.html

  • Size

    9KB

  • MD5

    08e2fe4402461de6883e909fce683543

  • SHA1

    514ca6eb4058847d1753f31475a0b89c609506d3

  • SHA256

    ae7e7ee06f48be4cc72e49e777169a458d2a2f23642d67cce557a467020d4eb3

  • SHA512

    9b7280098bcdba18a40697b92b86f671df82450625015445bac01fa77bd034db5859959d6b2fad052ac0d4cbc27580bd94fc4de627fed8fba7f17d14ab67e5ec

  • SSDEEP

    96:uzVs+ux7jMLLY1k9o84d12ef7CSTUVGT/kNSOQpNPSg/tJTlVHcEZ7ru7f:csz7jMAYS/w2NP7PHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08e2fe4402461de6883e909fce683543_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2252 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc1af631d62ca6691efcb061196ce40e

    SHA1

    9827e51e0a8c1ffd5931e5ea736893d62aeb87b6

    SHA256

    078478423a6c4dd474c52b519427a0f39f18de25f80d52e9a227806c4b04166d

    SHA512

    d016747f5448a81c6afeeb909bc4584c011a3fc324dc2e39c5bb0270bd6b781ea679fc93623605add929c150a5ea221dd546db63ebf7b43420e04e5ff859cc9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e068c339e2406984655801b750a143a5

    SHA1

    160f5c3eef04bc8fce6d4b4fb96183092dd84e63

    SHA256

    56c25b37e4dd71dba63cd14afc74a5c3200c98277fe1c71705fc4a3c25f72b75

    SHA512

    52371b16b9eec28c395887ba07782d200efb682fee6ae700256a71db6d5f3fe9dc5b25f559d60e5026bd10626b403f5b1064c84ea7809a72490dbda1c4b8ae5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    865dd0c33e2bb65bf5e1c7f5b726fc6d

    SHA1

    7042479186aaea59bd669612d2381c46950313d7

    SHA256

    e1cb29f96ab435b93b788e6653cec686370fc80e6c4d3cd7052e9215f53ec74f

    SHA512

    4b96c514904c57d1d1b0ca67b5ce2c75656c47f37c3777077ed529caaa848043ba7188cd79c58b7767a6cc8eeb70f317b161063bfd90dda6bbd627818e2ddd9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e3ef6fdb2192722df4d796bfed3b9dc

    SHA1

    ce94e0d2f9b00a22a4ce3233231285f3c7117dc2

    SHA256

    1c7d4d10a5a626dc9af4b814455ab30a4ff01fb17f1ccce53fd564ddea5a856e

    SHA512

    9e9a73cfedbc1247fd39c6679e92f937bba139a6f334fce4265dd8158879529ad421e515702cfd013cecd5a4ce9a4969a42c82ab454f891fd0cb83a6ad805581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39332c1dd609b820539a12e71c14f0af

    SHA1

    ba480e6b6b4f2afe9cd42f688b022e097e9c8a73

    SHA256

    4050fc0f0e6f0a8c4022949f4acb59739ad0ba8036918bd215a99650f3059e82

    SHA512

    ed6adfd06a01d132a22caf62356f89aa0ce8975cc41f9105c1b0ab10e99fe16315db480bf675997ccca05f4db36c7365cb00c61133923034374591a5151d88d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    493506423430eee9b39808dd1ac17e97

    SHA1

    4335bb4104cbfdc1a1c57d42f4161b1db7235ca3

    SHA256

    cc59300772680868f26bd1b4b5421c27b8feb61de3e484889de7c0efea265075

    SHA512

    2a307e0222239cecee7a9329252d0197b46c16493d61f3223c53411441c9d858b18dad60ef3f2bc2ceb5c8a7a5654849ef82338868e3ebceab0c79b64a439600

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35c0584c0f5a478840cc468f4c33f73a

    SHA1

    d47df7196f83f3c29a22c3e5fad536de72621e4f

    SHA256

    30b808eefb328f1c21530c81bc5f9f0a5a4a6417e4424101b00ec4d4a0964c03

    SHA512

    3b4612db7bdfc5c2b07772855c43f9de672d352ac3904a3f0d9a328b3bb4d664dec42dba292e2282cac4c88d9fcdac9140afed30ef87625c814a556fa937f536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd364f30456c2733228f9efe2e3b122e

    SHA1

    55d2e1c81d9d77e3615656f9328a2f4c4cb83481

    SHA256

    35a2ada4cc561dd360952cc2b6d4abb325e40c5ceba8b012ab59afaf0d34b385

    SHA512

    69f372af26a9cc1092d388d8909eeee75c7ec5a54369173af98ed5cb4105c5681b2bd11ea3b4bfd6afdfa897847538d7df3e2420dd086d06c958647c427649fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    baf957e0d9fcdbe66da54525004805a6

    SHA1

    4eb5d5153227f09c5dca0d3985477be44efa2bec

    SHA256

    478c2dcf9d415cd652bbc488796040803f9e3f58e93d5566e34e85a7f86c5e7d

    SHA512

    a1685df07780e7b810a23484df952e598f9a93a98455f15146e158c25873f6c5d3365f7fac6ffd099163bc93452f1432c30527fd5883624d1f21f260cb6e17c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93072ef3d17566d9b8298ba63d266a29

    SHA1

    f357976023994d66a6456f47cf45311aaf500956

    SHA256

    5320e2f37a17a0eacf0e94012cbbd4e02ac674ebd1d386cd50f06be5b421ebe2

    SHA512

    dc2fa366c2659ca1dc65d9cbd019c298cb8e2e9f973306a3ce02bf86f8b1fd48115d3af94d8cce01432b82a3d6eec23b9b5d8fb10b95b1a0216ca61fb08240f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e156133246e8aa0365b117a2fb791372

    SHA1

    edc5e152c62cabf25b7b1d27f612e7b7e6f295c4

    SHA256

    2e6a79f6b1cebc8fda33b0059a4e538c6edd5e14a294e9066de4345c3032d2c1

    SHA512

    137c7dda181925ea992f4d37725f316541cc70a0e163430e91967c48aedd0feb1600b771761da1c42f3ce5fa8264772714f52772929a51e5438dd61a76958277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ab2f8cc63d99d2080341e07af96e72

    SHA1

    7cbb7682b2c3ac323dd18a738f3d49607e1a0cc0

    SHA256

    2204fbe35b6eccdc24eb2ace63dd61e9ecd633b6b3c85a3364caba3f17e45e33

    SHA512

    729e81424eb7394580ca7a7922e99705adf75253e2f8d4dbe4f1a960e3095ae40d3a9e84957cc3b430542127c30e08a85d07ade9cb6e78ac7acc7535a47befa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7446b07572c62b648286a266d2ac2962

    SHA1

    4e8c74941e9bf6655a076148efe9dec2537ab599

    SHA256

    510381b73c3cb2d4debbac1837c2c86ef66e72c3ab5ffa2dceb157d5bdaedd5d

    SHA512

    39b4838f78d1766a05d60146efb6e7dcc7522fe22dc91e7da60f8ed7268c8e513d8960f5ed10dd275a7d8aaeb8b6f5d0c267539a12a4b64f8c13f499ef687cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48035c9bac31130bcf3195a37b415325

    SHA1

    bb86e318f58ede5ff4699e6751281e94341e9ac1

    SHA256

    696941ce77964933e50fba98142be33a3ad6f025ca3678da2d8a7ba9708a8c7a

    SHA512

    24dbbc69d1e432c04572178c674778db7c5bb1068ec26d416be531360cc14f5fc77d4019b19137f3dace6548169a3adc5d3b0ed2c2a7238109098d531ded9218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cb1b3a7b6652eec627fe0ea5d6cfe59

    SHA1

    4ed337b90c866e2489137ffb533561db974d6a5c

    SHA256

    0610b097c3f6a8e9a1b8b20dd38e8cb18a96f137f42513ce24a40fda02d9f430

    SHA512

    69da4c6e757177447ef272817d2ad39ecfd91eee895940ac861986d1086c3628475cdead398e8111f5177715addcc999b096d83e8390f39e6e1d1070a95ca6f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2b9354d3f5b10ce44fc95c808cb8abe

    SHA1

    ec6e267f591ab620a3e07bed9a8e9610a4a27300

    SHA256

    5881014e7ead5ddff04acaad513dd008f48f7845cbff7b82a7ecb9b9bdb0be11

    SHA512

    b70a63d7b00c8c20150235994ca31380ae6ad3a342190d95b9c36180ffd76ec6fee311871aa00737d74bd0a0084bfa5a807028cb30eb6b8527410154310edba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1a82b164e362d35787b0f7ab46204c1

    SHA1

    058df3cc53c51610d276c81f6dc9b55d64b28b8a

    SHA256

    e4abe0492f205b24edaa3d381eb7f63295dea862b0f9df2b48940b5e8cb6da4e

    SHA512

    d9565e61c3463f6c8a8ecac795ec1bf5f65ec84bd5da50c2805a37c9aef80bfcd6b9e3743d2304fa59dd2fbd5285de8330251e7c2e3f87240490f17179d703f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8251de04f9e2b0bdd3274ceb498f0112

    SHA1

    be93c5be61fc5863ff02317660288fb1812b47d2

    SHA256

    948b8cd1bd567dffc7fb0f05df4cc8e63ab28ef7b275d438bea89ae914cbc3df

    SHA512

    9a63eecdf9279524c244ff930beaa0171b0fd0e960127f86822718148f23650783929361a4becbd39542c177ed5276e690872acb58be91b82cd5f4bd3fcc7da7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4467eeced064b345b1262925fa891615

    SHA1

    810f7daf23eddbfcf531cb2883b97c88f096d965

    SHA256

    c2b73a683a4fc5bc4a70443a813af0c95630fb8819ac5bc09275515bb8115bc0

    SHA512

    c10c9578672e47d3c6106da32276d843773851743cdf9734da31b94e5cf73826b9f1fc6bc6de7a25a09b1041afd06a1744c62d13659e428e0598f9e653e29e45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05c86ea084fdb28b4eb7ae355dbb379e

    SHA1

    3469a4d1d1f65e4ae692e6111314849bce5a3918

    SHA256

    98d615333d6bbaf31a1602991e70d2450edc5e9446258aef856d78540172ac18

    SHA512

    f71478a6522b57cec8974a8f091b1b3a07778cb5e7d581342cdbf164f027d8de76b4b3d90d6558e3998e005c682f0af09ff4593ecc710c46a4ab33b8f03509e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70e770d3905a0bf7036ff06521769b48

    SHA1

    93b7152ce7a19dff054276d89ada215a1dfb1187

    SHA256

    a83968abb0b54edfa70e5951f0638a1d049ed5c1ec045e15808fab46aee45505

    SHA512

    03dc3ec5ac2e8c3ecf6dfb16f2b65f4f8df34add4304b1dd6693860f74d3c0152e4cb14c70d12d1da9a195e32877deed3f23cfe2f75ef2b04bd2c6dd5850c779

  • C:\Users\Admin\AppData\Local\Temp\CabABBB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAC8B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b