Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 16:13

General

  • Target

    0b8435f31d303a1a40dea61a9b414f15_JaffaCakes118.html

  • Size

    31KB

  • MD5

    0b8435f31d303a1a40dea61a9b414f15

  • SHA1

    cf6583b78af759a4f23020514b5768690ede6f41

  • SHA256

    9ceeba77ece02176aa6d452a9879b208d7d68af68505372c8dba459fa2ef1f4a

  • SHA512

    af371f6cace833e59b129c898169cc2fc4e4dfbbde70107913caf7851f105c4e7f95a8efb20bfec01304d7c9791c7153f78dd36b0cd851f2985a605ccd2d9bcf

  • SSDEEP

    384:Jda4V/HkloMhs/znnnNvNyLfNvNyGn9RNvNy1nnrNvNyYnnDNvNysnnlNvNyAnnY:JtVIs/znOn9gnVnRnTnV9Kihr50vn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0b8435f31d303a1a40dea61a9b414f15_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    8e7cd1fc2e0b3f8a0a329c30a0b1dc8c

    SHA1

    3c68e655ca0e552423848b5075fa6e665a3dd6be

    SHA256

    d6534110d838ef8a79f5bcf2464754e047fc905f7a0c2dd509b63d4914f8048b

    SHA512

    14afc8b4f9b13847873d9961fde8eb87f256628c295bb01ab20994a20f901e765e01e5c172a08a00d43c44fe59997d41d68b4329a7b5c55a73b4a22b2ec3adc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    737d08f67e96c804120525ebb0af1304

    SHA1

    6df0b163812f0f4645dd504f78cc86f93601709e

    SHA256

    aa2ac15baa1684fe4dc717afb89b98bd5bec6cda786160fd583283c1199d830f

    SHA512

    f3e0a222f55a67ada38914c94ee696e7cd068aef727e6e289198d1d7b9ef8b0d581eee3afac96e953e57eb7ed710d63f7df268c94326efdd8e638f1e717913db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7e7c416da9cc84c3ed34b5b040e8f57a

    SHA1

    14f5928887f14336c10ebd06987417b06791a67f

    SHA256

    29848c352953a389f3493133e1bb7cd413e1321a7203893dd527d39fe339b8f8

    SHA512

    096a56e8daac2c6c510d59110ee3d40376a90f1f6d7d7ba777d067d4d6b9cec8c864f0cc9ef672fde86bc9f0be1433e5791beef886af18ef9d4ce9669f91a082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88795709c2dda19e6ea4409b8f68226f

    SHA1

    91550e3a844acb3adc41cae18a9a33dc7e3472aa

    SHA256

    1f091477c3206245c865a0a6670df091b4ccc8a968e2809f4d4fc43bfec2f41e

    SHA512

    04c54bde470eef5b59736ef6d7b0b5de0fc0af82279acce04999397ca6b87cc9b2bdfc054493164331404f9c32b00cee6c26017b55d65f6298c3b72c473e4bee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b931f10230125c4d782657384c5e686

    SHA1

    67fd68733db0838562552a60e239f9d47cea975e

    SHA256

    0dc8290f54d23837037b44c92e34673b3c3e264133d62a157f9a331b7e997447

    SHA512

    ae90072cf25e67f197ed157ce89ec07720a95f92af5eab2c884b6c8c61619f5a9b47320e334abb5a2331abc85c5f3dabb2cd0dc86209aaaa5c22c95ee6ffa632

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6404d87407f7c40058fe8af87bad80df

    SHA1

    ea72e848570c44bcb685cee83ec2bb7c110f1a62

    SHA256

    cb4b8a4037a2b2bfcd0c67e8a24a45e9a4d5768911073aca4703691400d1b0b9

    SHA512

    44f103f6805db4f3028713698c457548a39f5acbf9934a625a52417ec7aecdd09fab027840fe1da76ffe582843725147ab5bc86ba0a612774b3e20d8daa06ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b19e9171959b5bcfe348f469f2ac01a0

    SHA1

    1be2f30bb6d617ece37bca3dacef8da97bd131fc

    SHA256

    e0ef76ca2c2416c56a5acf154cb3580421a4e4af8279d606750a6d87e3e81d90

    SHA512

    2bdf5ca320f034c552668192e0a4a493d0db4d9586480174e27b319a070d94d867bced74c70de44419629c78562f6d0ec7f41f4334aec85a004364978cdae0d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16476cb8c0d68d6544ffa99b0d5a0db1

    SHA1

    c613206a61ab633f686f5ae2d2d8462d05fe9641

    SHA256

    203b76202d6483d0997a5686d26d050e7defb96f21f25da35345dff37392b8c9

    SHA512

    0acff577699667c2782d11f7d586489609c687268c49ee1a5ce073eb57c8ab42484d0d6e10e79a888128361ada07daac71b47a93579e16e1e32f4f4053fbb2eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    456a9510450b09f660f9308f123d9a2a

    SHA1

    5403939bfdb32a7e4353564b92f8809a7333530e

    SHA256

    9b90011372dddb6afc6c09b2840019356b7ad71376b34e3c9cfbe59f0ac66814

    SHA512

    60b7a02d0c9ff446881580a45759b61143ee29def85c526acc0217452bc467ac0b089925e8679c2772196b44d643aedb1e776c08f8a537477742bda69012adad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6837069cdcffb230f31c70a5cd0dc96d

    SHA1

    50c40aacf1a4b7c12820897446e5a6cd80715d67

    SHA256

    068c6889bd48fb0911ba5268d979f74a534426363a28725c215f5259f9b18265

    SHA512

    62b1dd173f2573c69eb170b4d0a9f880f4a89aba19ebce7e6f8667770089159ebe2cd13f27b7191a0b9783c2eb6e52d6de328948247781ebc601a9ff1e402fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb140857d98e830bae3413241f7c279d

    SHA1

    ab7b1e321463afef280acc869b3d860891bb80d4

    SHA256

    58bd3aecd1788a15b4a5d19c22ba4e1b32a5b6808ec64a6f794774e324bbf129

    SHA512

    099628d1c3f20564f165e09f5acaeda8c030445cd3b69ca221c80ad7664944232fa6657ff006e2d825004f5c2b921d06fce8008a81c53bfbbac23d5f51c0db98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92b7090dd852311a8682729fd855d86b

    SHA1

    4498c2ba86d1796b3300c7c7b8ff2b4ff98ce990

    SHA256

    34f793bf7a3a2f05d0243c137d7858a9bb368719459711665631815ef49ddc0b

    SHA512

    0fae17bd75285db84f9f8f79b15493a0602aac8b632cc6b0a691eba85b71ec7f7f804f4bafba1e7e5f75a44ac604aa61ff76d23e2ab5a8a7851203a514412b83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    674c3a983adde5d8937b3fbb6d06dd69

    SHA1

    c14bd21d18b8a9f0b73477f8c5ff0f2a5b9d048d

    SHA256

    115630bd5f1ace53bbb25d3862c19c21c6cf9ed67ed3f8b03ed2c40b56dc65b6

    SHA512

    967f15a65b2ada26aa77b81035b0824a6d04c730c37f386ef71b88e24ff01c9516b17a42bb7e62f87fe0131618c445159d53cd9637e37d6a4ef9c38570126b9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b5cc911a1afc9775ad58130592ad51

    SHA1

    7803c7301da49b4fc3c34a9f1263e37191c1fae9

    SHA256

    b9ae125c46b78b84a9e4d94ba4606e76683a38fd827851bf992204bbf936f743

    SHA512

    2709a0a75f03751dfd6f7cb8c22d300de6c0fc3be72a00e921bc8be3dde4643e9e19f890c12481b2695168025438293b1d03c85e2891292f3a635f4bc6084bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1056f3b732a6f1f9ce2af14c3fe76be5

    SHA1

    41c41da96da30b397ebf057c35422718cb9315fb

    SHA256

    bd2751e21964fe7d39f2aaf07cf76d8acb180f5fb9aac3aa1c0747f3d58b2f3b

    SHA512

    91a8ceb8bd2e6c731c4bcd135d7cd0045d208d13e4a4c9a134d2582071adecedda317259b225185e21346e5eb03b473e6248619110e25e6e35f4c1375145b6af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afe5922bb15a21801efcc2b1d3591efd

    SHA1

    eb5a63fdd98a972740c4ae215c0a0a78a0dff0ed

    SHA256

    adc6bbe331e9bb6a4afcd69f0c777b8744dec3482266d977cdd008df1aea6fb3

    SHA512

    52e271fe6bf99ba80ba224b1e62cfbcd839998c1a3d5653ed1faf02aa206847fcc755b2b2be2dcf4aa28d952aaab0796271adbf6cbcf8dc9411cef7f80277430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c769e6efa7fca6dd1e9551490ef06db

    SHA1

    d741b1b25b154184e48c8d84b26d4c596f3e159e

    SHA256

    7c28f7ea33a48c3952e4aae914746c7bb04069e76b015a13360b04cb35924ecd

    SHA512

    c7122ceb0a0e2483c9b95fac56bbc56bdf2c2128305cbd91255622f576c602221b439a90b1c06acbcaef1887d4fd5a1372c1d8d4d27a8785ca7e86b1dd73c4cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9177e3c01dc330aa8325c7e726bb59d

    SHA1

    2698f41ebca83ac1acde2f5949faac065013b610

    SHA256

    70d6e7ed807d4688539f0ad39e42ecfdbe94406d9780625206bd3d3c4ffcbabd

    SHA512

    181da091d410ee0369035d694fa2618a4eacc8a08a45c5f8d738aae4d9f4bc769e56ea54b11a25125733e6a1ea5dc44c7065e26e06ba0e8162dd832ba2a0849e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A7EBFBBEB8CBB27766824D5C3FC090B7

    Filesize

    546B

    MD5

    a0ce086244ae20851626decbe2e6fac0

    SHA1

    c08b36b0b1356201c8aa63908df1a199c7bc3188

    SHA256

    4eeeabd6b75e433657268e96c6ec1db20a55ac4557ba5a41553e808259411689

    SHA512

    36279a725d5b2517c9b748b3fd12b55c7dcd4edc8d7c19ee4d43c575cab8d89c23a211a73880ddc789c6be729a31071834f4190f3e37b3eaf098256b39e7ad40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4e77a70fcd15b5b7bd99cae8f26c55a0

    SHA1

    13ca4cd06cddba4e969bb56605372a4934c87190

    SHA256

    288cc757f813d66e323cb9c141fb04a3ee441dbedcc078e160bc2f44db0ee35b

    SHA512

    750ee4e5e220d02710ee7dad799243d99c82622b50c65c227348ca24dd4f8bf7a65bc1238ad0dc3b40fe4e981b98332ab4f0b2ced33193b0345ff596739e12a8

  • C:\Users\Admin\AppData\Local\Temp\CabFC0D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFC0E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b