Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 15:28

General

  • Target

    0b5b0ac59ed1bdfcf40954b3f963d6c9_JaffaCakes118.html

  • Size

    9KB

  • MD5

    0b5b0ac59ed1bdfcf40954b3f963d6c9

  • SHA1

    a84c59ad780476e7b1111fca6961865589642ca2

  • SHA256

    119e97a237d9500ff9ba066ce0a5da46d1e6f3393008d26ec21e1d1cf1ed81d4

  • SHA512

    3fd547f046455400e573b02e67ea7d17dc96002d5564bf8784253d8df2d247ef3a8ada2d7ffcf43327010344f0f5b04cb30d31ced61e0fdfa5a7dfbeed6e5c24

  • SSDEEP

    192:2vwzGS2yJmae8YpUu4UsQWzqIBgd261lK0Dtg00NAgHfQS0SZ:I1lNy

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0b5b0ac59ed1bdfcf40954b3f963d6c9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2516 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed963a09861151a67ca6fa41c01e46fd

    SHA1

    761a50b1daff6a9c07583c8ad8f139bdb623b3d8

    SHA256

    5a2aa3da1cd5cab581ed8a750096349c698d812fdfd92d1e1ab519970c9ef40d

    SHA512

    3799747c90dced84e0236f826fb8d0a017eeb3c7d987dee06b39f050942b96818ca4dc587b9b41b382b5f8871c9c2339fd81cfcc394eacf5265e0e24fc9f7c15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8741b07fd5c34cf0150cff1363259e25

    SHA1

    5a8fe0a3c4c46c538a54adbd8235b92067f1719b

    SHA256

    b9a08df40c59a92057f70b1e3aeda6117702e61889567028b1343cd6326342d3

    SHA512

    953bcc4334d326455ecf78e2cd45c221e3731f542f96872230dddddd713e339a14bff5e66ac687a0b64788f88a0bd35a2a6a022b6b6a046b21b5549d4bbb8446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b0a11365ea3f043cbba9569347918a4

    SHA1

    0d5d668207360ceb57159cd4c74938218e19aaa8

    SHA256

    88ec2e8044a3d7b5c95f7e90e90261a9b3869d15a5c967bbe5116de0db4fb301

    SHA512

    9d0f1e3afa5cb6f17817ff6f901faf47c14d5666114454a9661a207eb5f2715e916e1f63d81987c279c4b185b0c59dd3d2fb194ce52cce4da8c0153b9504caaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fc5fd5ff79a0f11fa48de51df770707

    SHA1

    56dfab56f64cac5de3c14555b91f801017bba15d

    SHA256

    7e4d5aa2ed0b8b7c5d86e2a651382223c412af5232761382db61e66d38770ed8

    SHA512

    e72466b34d9f9d1e5bf4c545631078ecd911ce615465ede4dba507ca37cd43efb1402b929df2c3a4e803857dda813483cead5775a675555d37deaeaf50436c85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c8f8ada7faef7599f861d393a7473d8

    SHA1

    b162e89d0da97d65df92cc8532955adf25525d9c

    SHA256

    0f3bf9e8cbb8daccd3be0b4017b8fd2ff806cab48bdab4d5ca09b0be64d61ccc

    SHA512

    42247ba0fb0c4b06924a45f25827f431df345defb593c726d689b284fa85a094adc98dfdf62ef1406b7ca90485eba5954ee3998af109943f849cb3ab87a30367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef1139f5a77a90101e16bd4d1eb5590b

    SHA1

    ea9250015727116a04a96b42d0776d1daecde6b6

    SHA256

    20c0e23cba9b1d0c38d3f429576115053a09b9d5955432634ca9c17b906251af

    SHA512

    8275d62bce596bdd06853e8792ffc6522214133f83a0ed3c5afca57375e1786e2cf0262b6df992ae1d6a0047dbcca457f64f4d23da530067aef14682c429a1f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4935a7bf74ca56ecddaa2f2db74435f9

    SHA1

    aeafa7d9f7f7f722f6623c1087d4405ea9b1cbce

    SHA256

    2ae9a98f971adfb753c9021bc15fb8825ce4a83acbb62bee51a19272d056bfa4

    SHA512

    f9e4c4954c54f28b6df225296f4fc041eccf0d543b826e0b2e0349eba1a4f814bf5686598d08662bbf47bb6af77135b2785118dd248da9dc2db8da90d8451d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78b5ca8144ff45d31628fb8823e5fb52

    SHA1

    8331c9970a26742f4dff8a383f4203d58d93c8be

    SHA256

    259dfd9128a0c3135fd1237382f4c4ab935a4e5ecc51d6047debcf80a432e724

    SHA512

    d222a40a81fda9a4393c45bf77dfbe0b93e6e0106ba2370fdc3427547c1ab89b794a4990d54b686fece1c2aa1e91a1e4c714cd78fcef5155389f68db7c94b7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50c3e3e84c5f1cfca2cd7e0a6f1cf352

    SHA1

    b43f48e96882ddba42d7a8c2110cdadaafd8ac3c

    SHA256

    1ef69714c6f7d82b5b4ccf7946150ffd1d8cb7c84d88c5830b1c401e65389418

    SHA512

    283040c40351d4abbfd279ddea2be70e17735671c17daad941ab04f1999dc7360f84a9fcfcce0cff7a773d79679b603dc196bd5445bca2ae5d2980b0426fac36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47da5bae0e268584c9f33a2b70d41163

    SHA1

    d83bf55d4eedc44962685e8cd9ff74afe607b018

    SHA256

    c68a83b73d18b0afeff198ddbcd7e1cec461d052e1b09920402c2ed9a85d9548

    SHA512

    4b6ad4422c99ad693555043b91cb6f7f4a73c3e57b8cf9da44f0ec83ed549d6b231b22954959ac1adde8ceee30e5355d5dea2a8fe75bf801036ec902d6365d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5969580669b4760a03bb0141100d677f

    SHA1

    f1cd89037eec112dc4972e26d9a65081b0d415ed

    SHA256

    f8e97f5fb2c0413a89f71efe2d42aeb039fa356278bad38e0cc39edaecc9f49d

    SHA512

    7db712b0c74d9014e641af0dd46622fffd978f4e0908b5bf4b89072204d908c3a9459818ee9102f91dbf501b134a76f8834636873f91aea722c9f076ef00c413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ca899517f5cd00f8250c0ca7b1cf3c4

    SHA1

    f504320cd8c646386c566d560f1c329aeaf1ae01

    SHA256

    4e80d274e99134f6e94955a2755fd2a58e59b09117e87df00decee8348b80f27

    SHA512

    88ad30aab48d943dcf79fb5cb9b9917e050e49fbc1f165d8f6fb27c5b55ad3beb30ed842a326a4b40feefb47b451714d1f18a7bbf2bbe75c161c454dc8a1b37b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    385970ea9f4d2dcf45eda5d2b2d35a99

    SHA1

    43248369032de1a616d4db7985561a166d27c545

    SHA256

    f6b8d727e96e0ef3ae609eb7d72c23859dc1c219440f41064a4de1135f82378c

    SHA512

    b96fdb1e326929d0f72094eaf0f800388986f9dc3395f2cf6e0d74af253d605fb2807e127da05f544af92304e27ebe35159dfdcff0f03050a871cbe5b2286b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8257cf4f593be17ff9311a4343602e16

    SHA1

    32840d1123ef7494173f513925b088f1932fb55c

    SHA256

    c5cf61e605abe2b94b192f0a742b15e42031c214003b6bfa943f3818ca4cd976

    SHA512

    596982dc19bcbec6a9202581e2f0a6ca729ada644b13c0b20d15dc947dc17e3dc302dff48e230b416becba47846dbab570909c561ca8d33564c09d67f4653a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b14721331ccab1e7cec9bb50f8158d30

    SHA1

    792ed094e25d396182a0732b397b45665794d994

    SHA256

    86b7d0c0952ade28ef6033a30330f8f1a56794dfb0c90a38bdcb9033be874434

    SHA512

    87f36e46845587c0e60d6ad4a26a62764c1d05be2a812273a1e6cfc204dd4da26551b8866200d8ad912cfde8ea4161fb37f2b466c559c1227f48185a01d7ffc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7cc5746a215b19bebc622dc3170ee23

    SHA1

    4d4e821cb7f8e450d53db1cf9fdd8ad95cad720e

    SHA256

    2b89feb4e5ffbc817d5983dfb07843ac383a35cdc48490bdc36d2fe57be7bcda

    SHA512

    3c4b7c9be5376c0c67a2095a7106d2a245b55df0fb6a64f9a73d07189f64b9f82a1dee44f197d434a93175a9bb781c61682475887b0db260aa585605bada2cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5088e027cfff61f9539869c466e8a7c1

    SHA1

    4e158a3702f0c41fd699bc941e2bf4737e761a5d

    SHA256

    6dad14b0ed54a8b7d97a3dd9c6a3c5d047f7279f2e364f4131477a83593bcc3f

    SHA512

    2cec6a2d776be384e9e25f6b9c68a2c9649004524f5944f9602c1807ca195cf534a985da8f4818139455f7721790212004d004ec0a99b9bfbd4e684a3d2b6717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2daca54a859e9377848cf3179d9fa5a9

    SHA1

    d56c514fae2160d8a3ff7b1cf0e2a4c22badf8a1

    SHA256

    4010efcecc939a8ad7335dceb29559115725f6ecf41312d5149f45b6623692ba

    SHA512

    c9f14ec20682dfe611c44bbeba42029d5a3c9428e590a2ed7db23d7f4d7feefc630e0fd5a57e74ce4d42946875a46a83c24255999578b1d8ff186324023a553a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d465cad9c088fd20603694a9d5e3680

    SHA1

    0a3b4310da0462014ee5d5fbd4ed0d8d6750ee81

    SHA256

    80ae66bdba2432a6cf8f6e2c127ed31f690a06a887e7e14b29b61caa23ec0ccb

    SHA512

    01770a5a45a84f19ab6d35f51d38e85454099fa851132fb36e624ff8dba81c3d06fbfe0006e49b50977da645919977e4b11fee9a09bfa1b487d2879351b0bd6d

  • C:\Users\Admin\AppData\Local\Temp\CabBEC0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBF5F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b