Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    81s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 20:01

General

  • Target

    0c44c50199d291ad31f8753b341606cc_JaffaCakes118.html

  • Size

    10KB

  • MD5

    0c44c50199d291ad31f8753b341606cc

  • SHA1

    ac5289a6ddabbf34fab3290a875f5ef4eb5877d6

  • SHA256

    a69f274c568674b124c5d71960ddd5ef6ee0351f1dda4813bfd2f9a1a933f954

  • SHA512

    e13a5e89f7b1bbbc56055b6a7514f3fab1a08391ea373b9a7d6400079dd01b3a5524d868f59be18466c11fbe2abfc43f9c062213e5e07f8bc0c82a05f94b5cc0

  • SSDEEP

    96:uzVs+ux7bWLLY1k9o84d12ef7CSTUyGT/kO2UpcGhuv+ip/njG2ti9WblVHcEZ76:csz7bWAYS/H/qcpjPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c44c50199d291ad31f8753b341606cc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1120
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1120 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e5b72bdd2e2f8650ff33fcc0c806ddd

    SHA1

    90ecba13838677ec81b438a34e98bfb0e8ad76e6

    SHA256

    d92f0ca535c09711366e0357e4d84d309d62b20d25d0d75de9347c0937496687

    SHA512

    767247ac7075f2b8eac78d137805c2b4bf91f3720f99d38d99753359a49f56c5f7c15dbd8cc66e5d6fd194f02d361984f5d1cd7df951f7b2f56e6dbffdb17a76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47391f427dcd39f1d3b03ec8ccabc19d

    SHA1

    5973d2416426f23077556876aceeeb334abc3bce

    SHA256

    c10b314a890f8e742ad8a9fb4b759f244be740ed7f94b62dda523e9569d9c8b3

    SHA512

    f91d483bcf8ff4202d6e86b25daec60de784952758eb52c73fabb62d10c2ce917971c88e86c570a8f451dbe678663f51ed9e589df59bb9db08410466b7062876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    954f80c56f3aae6cf4c85e879203aa0b

    SHA1

    3c2b662a6ec562928672ae4d7974b127141b14f6

    SHA256

    6826dd7aa8931f93679b5b6bfa98b6a29b1e42d4f1185903f2cc7e693c735812

    SHA512

    43a5d94cf3454dee050f294c004737402346ce160b65f8ed05b38e9d8bd0199d19fd324cd33211626fa634dba362f9db0a36f1b53c8ca8d3092390bc82231fc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03467dd2c92147d190a6681b713a12a5

    SHA1

    49f32cbf8d85f8e0dc58ba34920ea88494db1945

    SHA256

    078d4ad9dd2420028b274541542a239b983caca002331847a8c835fb08460a3e

    SHA512

    25d1c7acf3a3ab3f7d429927ac75777b6fadbbe15b640b08a1eca76af9a9f4db9d09d7aa24b0a475b3ffa99ff79742de9a1b86e367999d04ee0835be2fed8cf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    706e2dd0a23161c41355d3c712b3821c

    SHA1

    911dc0d4de83f0f129cef410b34b36ff9c734806

    SHA256

    d92a2065c92f1bf2ca820ff24af54f9a7623fd6a38f20bd279cd456547b3c074

    SHA512

    d8c266521ae631350ebbbdd914f7661c2c1e4e3dd3ac0c9503cc63ee335e2193e8f029db64e54f73cfe1e57fc271a5d94824bfaae94c91bc8546b9f0b42be44b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dcc0a675a0a9301ef49cb924298ae02

    SHA1

    090f0c1ac40d4f7d7d6af334401f2f56f5234170

    SHA256

    2b4be6400ef92fb171467d5498b20a4579a33dd2a5c78657fec64d96e415f2fd

    SHA512

    7fe1f3545acc5668222c656ab0fd5b3526a14e5aacf357860a39c6eb832ae9b2ef82500bc4ab762b3a1290ab17a93ba9bea129dbb533d66feb58d6924fd85553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49c93472e5e72b455dcaa601c8fe73f6

    SHA1

    a32fcdeeb258fa9cde69eec307556e16b29baad5

    SHA256

    f117455b78b359c843125f1d41cfc36f761a6b4fc8b5ae74b5c6be34309ea3f1

    SHA512

    4eca95eab8bd42e475e3eb9ba88af3041a84bf3115529704391d7fe732e55305a9c03b2419ce1fe09d7c84baf2ce190aa980131f3a025a476a7172f6f7b5100f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53423daadf5e56279f395ef3275c8ce4

    SHA1

    6f8edaced8d88565ef270408e2165f175fc7f2a7

    SHA256

    447c66916174f217cb693c7e3bf21e40ba7895381ef0fd5bb60a84c602be2f64

    SHA512

    7f1b15e3aef0fa7f466510d6ec9456554c8e43d69c83f6a738784fc0e15658a7116a0a25d918a160fea4e5668388feaf6d030e89f03fee3418dd8fed31b6a709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54cd4eb53fd90a8ce307bda0ad17b7e7

    SHA1

    48b570ebe90da802f57415429ae14d3dcf5a8fd1

    SHA256

    dd2583b32ce7a15a08359233b147dafc73652b265a9706163e53841d64984a22

    SHA512

    997ca31f3bdc3e8ecb20a10f26d807bb6091c54f259d4e5aa9bbee16ae5de35070478131274e6d5ebf828daaa89be3d4a8dc22ca2d5b65c315379dedb9820cb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96938b7503394a44d1e0c4ddf15289b1

    SHA1

    c8a42a0a8803636e5f2d141665c7cfd6354ab0e2

    SHA256

    0c2efc02c41330cc6dcc23423c403d71365702d2fcce184f6bb37973648a98d7

    SHA512

    d4eec69778baab907ebe0ee547e587e1fe8d21408c5d00c71fea623ff8def49ebb38215f84280b3edad72738bbc27c9531b464a3f5d60dbf84698fb2d70936e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90051e1cfc31328dd0a39d7b2c73a3f6

    SHA1

    eb3de17324d66eb45e9286700efce7e03615c19a

    SHA256

    6766ddba5611bcc51cc0b5add051318c3219190154b0b94653f0ef1ec92125ae

    SHA512

    36a5d945d7212f4052cbf187e1e69778075ea6e0d97d7bd84812ecadfa6a21b789a8ad49da4c73e76e4d9e759630781744d538b36594f655012e8ed54e6029f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d277b3885e84b1f9ee9d2216b3d0b3cb

    SHA1

    a373a407ff04405a96203d5dde3bdea6bfd36c6b

    SHA256

    365ac7da8e2435952dff3a179fbab218cef9366b3b530a7ffcab19333b08b750

    SHA512

    188e0c6ab020aa58fa35d3d267aded867f2c35abfe3b8f4b4f03fd744b6b8c2cfd10124b30aa4635c1bce081dc3c3dd81d58ddbce1e727f325df15f594f289bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c57632216b60ef32602c73b088519bcd

    SHA1

    558b1d7ef61b5a202a9ff5e205c1ba73c49a5298

    SHA256

    d552a59ca62392b6dd65a66b40959d811484894c380d708fe7f50b306ccd5a9c

    SHA512

    a5c34a1bfab4e7365843a37796a4c1a2193b4a7887009320708628a682810877de2081a437c51fd6a8c203b23e7ba32d3e592a2e57f804da67e50280429f0d80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a078ab38f91c6ad28cb3d1c3e9c11ed

    SHA1

    06790cb773bcc2d253b9ddd8f3bffdc74e64e66d

    SHA256

    e5a83a97711943ccd3270976429d24a34f1b5f713446e06a1954b2a2a9b85610

    SHA512

    1ff3175cbcccf12b386b37a219d28a63722ae64384c1cce28892382092853032638b3d0e090525cb57622280c93e8fb3a36a9a3e09c143816e509986e91fb4a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb79b7afc8407fb3ad6310dd32e24e89

    SHA1

    0f6dfb64e4620a8294d77faeb2af8c23ddc314e3

    SHA256

    d75fe3f74f2ce3a143dc4dec15733180aa1017a7d5ca55409b335a66389fd431

    SHA512

    7d7c5f5ce4cd09bbd69e1266c66823205782d9fd2458bb5b42fd576398ad3a4633c248b4c262c9d94902aa6e46fc272006604115893f0a6ce0ec639f60f234b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf495bd91f745a3943e43003c9950003

    SHA1

    fa1784d12a21dd32861d352ec46896751a9fa115

    SHA256

    9ff7592ebe7a47db8832d941a1ed1f10fcf77ce4795ac53c3d66e45395fc00d9

    SHA512

    74997a62979f66c337803a181623816e2cf10040c396fb10e75d61a0acc868ffec100998f405501511741a0b4b0c4703bb98ad1b830add5721c02e3317ad1257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62c86c5a3df3aee67c408bf433a3587a

    SHA1

    818a97e8e4f3b0da8a7b588945d18d581e8ed1c2

    SHA256

    b3cfc35d93a2301b512ee2462cfe2bb5171959988d7e199db5de971bbf16f886

    SHA512

    3107de76db1763e92dc54ee9640c99964ad740fd5d0adeef5e86b81d38980e7e562eb8aaaa0aa6cd9652f81a374af24d53d7f35eb7e2b7f43fb1fa50cad133de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    216df10e7a69938dae3f9657a5f86ecc

    SHA1

    0d687d3e0c43eee41ac5230ae6f0a82c8b124fb1

    SHA256

    0578326351968c56cb382389df9400b88abdd65e7c111be7dc13723db2fe8361

    SHA512

    c31c42e902460b0d4883ec9b2936b9f74d97a16c66a740600238d8a1737d70797d3369aee3494e11abbb0a946e8f6475ed1e7c6c419e65345958d105729a5415

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    defde66aa641a764e825fdfa3cee323d

    SHA1

    94438c27666b59da42fe6a6cd541dd438e548c37

    SHA256

    f31f820db69852cb9afae8ee52a89d80d71c34ba8e334708029eaa47973b9cde

    SHA512

    d571fbaeec0d61bece7cd200ca5737164751516773ea383837a9ab5723af5bf89c421acbfa4423a10c880609ccc6fd69ebce2375c4c57b53b09c6110d5b3b3b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e964a86dee4a5151d167a8f0788b39f

    SHA1

    74bd8e25811f4692645830f3ca4c2d29745daeaf

    SHA256

    28a733dabc05169b6d577564de02ed4d7bf45a1692f133afc95bf3b9fc0cc405

    SHA512

    fc7fa33effa1e88d3954ebb2340389db3313c92dc679c3bea7a51ddf7f84847928e8fdf4f27d86afec59c5d2a2ef50b4ac08eac438887b5e171349becf70cb33

  • C:\Users\Admin\AppData\Local\Temp\Cab1527.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1626.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b