Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 10:39

General

  • Target

    0a404419e5d28c032d0b75f69455611e_JaffaCakes118.html

  • Size

    49KB

  • MD5

    0a404419e5d28c032d0b75f69455611e

  • SHA1

    05b2cc035c44b1025099e654583cae0846844739

  • SHA256

    b5fd2c7c457a25371a81910ba2ace31e47e7815ae76a7d61a9450b2a1205e345

  • SHA512

    f89c51fd6169807cd84f2e743cbad808a32b02bf11e5a0197cd84dd377df9c631ac6e869674747b7e59c13c739df10267d685751b2304571dcad686f7be20996

  • SSDEEP

    384:UQ/PP2ZKz1/2/o2z78DndE9h8FHsLCCL1Nj/Y9ACFdvWYMy8eXYtIYpl8N19mOK7:II2idEcFq5NbYh/8eIWPgb3yZY3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a404419e5d28c032d0b75f69455611e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ea5da89e67c0f47f3feaa7e83f2f60a

    SHA1

    5901aa0e4e9a34b211420c4066b6a14116a01368

    SHA256

    4069b01793d9db3ceb66e36a9f0988fd8d49b4171af1cc6fc4d747b304fbb967

    SHA512

    61ba0f8ac2202a4d9e023ac299a8ad893202441030d8850e33dbe0c3e2548849e751a79fbe0da83425bc3c181bfeb4dd73a7e7097665e6e5230be7b724582b90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98844ae8639b01552765921b28aa8337

    SHA1

    79e724d6bdd674dde63715c2bce2907f8a8080db

    SHA256

    939b9b29d6712a7fa8db8dd313ce96252c5a6f47d58d1666f434767114000e6f

    SHA512

    4977dcd31dfcef69f789874234cb06cd3ffcc9367dc4670c3cc892fbadda65fbeb28e059e3a2037f3c369bc6d2a9790c541d076bbcb39be169cd009472ec208e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6139735ac1be36a14439c849b5ff921e

    SHA1

    f10c9e292cf25859c6560b3e2234b9481f4aa233

    SHA256

    3326cd6b2b6c22cf8e9f3ae07a7a206d13b42a6a5e095ad7a85927be07958412

    SHA512

    e266f1a1dd18a74984352172c2bb9511ef369c263adb2723e5ebe8d8fb5dc65f4bedb1afc0371771d77b7510affd8ae381d38706b1ffb72f5b7d8b31ef0ea4d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da64dd732502ca822d5be8dfaf88d4c7

    SHA1

    0ded2b405916a4cc2014122ef1dbbf390a2fa7d1

    SHA256

    e8ecb02b03c2a9aca08a201ec4d9bc43a05fe392c6e0d128bf20eed28173a0c8

    SHA512

    35dfbff46c27b2f10f90c192a93cd9c60e406eed8e7455809ff609f0b648b878658db12409be72df542ee3692b65f91bf1a275e3de4922ef63641b4e447da440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e717c16399e1ff920150a75976852b5e

    SHA1

    31a5e14200dd574fba8ff4a633873d8b008791db

    SHA256

    cdee31caab922543b1a2fb27a9c3f7ab0053e26e4e565102f6f58d9c552b51d1

    SHA512

    0179d51bf14f6a1f2bdfc3ecbd5daf21a7a7e37330ac33d1c86b25f1ead7c696cebd33526303cf71a392727477e739354a244bc79dab6f056c310c1f30357e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55b2298179d12f1e12e522161cd0840d

    SHA1

    7bb67cd3749d84df7337f9b9dbe3c8f12f1a5023

    SHA256

    a1e8423ae80e6ea2417fb396a2fd52010b89312898ba75ea626914d2f0dbb7b7

    SHA512

    cbf065a804f09f3e5e7380061cf4c643e2987a3e674acea894d5e46e23e57fc20fd57c6e9be97b1800c1150d69504da4e246c1ebb727bbf613bb6bd994d6c82d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6ae0e6b99fdcf22cd883657dd1588d0

    SHA1

    efce5a3f5b3b4849771b3c065cad089652e901d0

    SHA256

    6591eb825af763ae5f39f983d388776664cc57a04545a86236c52c8e1ea088ec

    SHA512

    97103036f3c9baa47385eb9ee117812df6bfa199d38827aaa6a11f87e8514ed5d8da7cd4402fc56bd92695786744c2fa292308982e71a4f5a1d82fa6f914728d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fc5ca06fe434b2f030f61c3bdb20886

    SHA1

    71d9c03951acd05194030e2be2f2567154d7d423

    SHA256

    417a0aef72acd1de4d639ef5ee1fe43e3082fbdadf02ba06cf07f6f0a521f5a2

    SHA512

    038189fa4fa43df0628d6d0cd296a64d3863065a3ccec81c26b30535eb671b5bbe3a83f9d172dd5e056af4a7529ab9408286eb9286d6fe3dc89ec0ce69607f33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a46fdc93c4192fc425a7c75a60c721f

    SHA1

    d70c3c25dabbc022e42658135a46faa2e4d0b546

    SHA256

    13cd552f482cf8e127fdd5acba898fc2c62af5d56209d9170a9233a5dad7e8b4

    SHA512

    01be524bac98d0e139c92a554c9d704e5fd8239cfabb6957777deb964043a71bb8401e116a89056583621144e9328a876fd85f911d4b7adfc3ceb1eed26a2d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eda0465b90b1b0c575c068208ed74924

    SHA1

    d54d4591173682366ac03e8ef4637afb8fa619a0

    SHA256

    f9c2084d55533001cb825639d1bfaa5bbd59bce96ba86150050bee5e176787e2

    SHA512

    cc2be167b22bd1ed0a6d410f66799b0f25fcb18d83cc517623919c90727fc046e001bb982355c20156e3030bd1f2572a421595e9f170188dcd1b83a13d08add5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6409cc844a01bfe622d4fd0cde83dc2b

    SHA1

    465af680f79558074f57c891f99e7a7def1a23d9

    SHA256

    d839e271e42b9b0e957531c5503c833ee03fc2bcf29f287363798558ad9fd4ed

    SHA512

    24b8294ea6f0fa180d97c9d35d4a7733af1f977466bce8c30951236e63efa773fb7b5726ba66bd6336df55585810efce32606c39027852b37294ca98a2330298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f733014645a87c5d63353abbf793a662

    SHA1

    96b42c3c255591db2e7d3f751e0db0692b13b4ba

    SHA256

    541c516b26ad476f2b88e74060f6514bdacc985f2a4711876f93a156c528b293

    SHA512

    58bfac21e9ff1dc7453fb691d151f2ffe79b020fa5b7ce90c6a74542866310c5e33f19e1e648846da695814f2a58e4c61e3d1b5db2872db4adeba21d142c4b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80890a15b9290653f6e3541144ccf795

    SHA1

    b666e019e50538878c2a22a03e01df2e18aec5a3

    SHA256

    746c722ae446abdc1c1be9e575d8d62e9babe92ba8e567c01c90318f0d61765b

    SHA512

    bbcc59e759b5033e62ea1dff7aa1bb36b84482e035ed09c1ad519b59fc4971f7d8c9bfb375dc99727b6811c094ba2cc15f2a225487386b1a98baaac23f757ca5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14eaeaac1e538048fb51ae87db772514

    SHA1

    94c96d7834cd08da3fed438c02a546e045bda619

    SHA256

    214c1230b1e5081ef81c8dffc350a3f8447a4c140eabfb48ac91b3c2747f5973

    SHA512

    6fc34f6730234e357b53dc6220c044d7e43b0ab70a0bb6705414881f388e82352e47887a785f3fb5942d3cff966e2a896e4ae32f053d952c60ea55c1764e6a4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    406cb7bb906a178bf2e949f7a9d5e3c6

    SHA1

    4dda3428e9743ebb132f962be108ed83d28ff4d1

    SHA256

    cc71d1bf8f56da24b70cc1d4e502482ef9b017aefa06275dc87040e0c5b0e680

    SHA512

    93fd5fb9314e530d4f023dd9d8aa4295aa77768d25475a51e692567dfa61bb3eb170be3b94a656dab43c9aed60d39b4c67ff36055b9744191e427dee13f10986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95e5791b13727175c6569ab667640df6

    SHA1

    ece2f91b5d0caac7aedc24d100a4f05537eea108

    SHA256

    d0e19985f52f368eaefd8173e636b274b0ec8f1a6fbda4d4ce8fb5233732fba4

    SHA512

    ea9ec3306cb8c04f97c1f9020f48503dd2d8b6ec93984a5243dc2d873c7d609463012091d1c91b55644e196a66a8acdb6ce057f646c226e6f40f74cf75d3caa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69a7d02dec118cdd60acec3804800fed

    SHA1

    170c7c10f02d4b25f60c14e0653833caaad4a6c4

    SHA256

    e0fea16ba8789ed53abd0495b1f99e4b963215d6719c00a9b83f64d1afca668f

    SHA512

    74b2929396b398fe18c9c1038b3333d4f7004f3c807ff700a26f619abc0fd4bbfd3192ea6d8600571183569f838963e00e0eae2ac29e2fe13ffe1c4d11ba3461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42e849a586dcdaa59d1931744e58fb64

    SHA1

    2e32448ea9e39dfe4236450412294632888da269

    SHA256

    b38ef591de2bad81aabb6a8b1853937d301fe921a8d0c3c76864214a7d7499b2

    SHA512

    d85d274bce8c9e898d3dc68759e4d8eaaf2c7638866a6f70d4a2e07e4f5ab552fd7cda4ce2923f9d445f634790374d4a1d4b52071fd94b95c892948a9b1dd407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5ee2eac4337970fbd5dc22abe2f940e

    SHA1

    0e05de7e5c812dd67ba2d7995003344e59ee453e

    SHA256

    47ad327d4a8dc9d2178dc156c077a3f48a14c21c45516aa94f95e30781771963

    SHA512

    8a4a4c526699642970bf5dfdb820ce5ac3fffd1a3e955fc209a1c54772db4a1204dbc76dfa35750b51925f1742a5edfb471fab9b2dd957b7da50b93c58356f19

  • C:\Users\Admin\AppData\Local\Temp\Cab964A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar96D9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b