Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 00:40

General

  • Target

    0d2324c61f5e8dc3095ecd78465c613c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    0d2324c61f5e8dc3095ecd78465c613c

  • SHA1

    3e6541350c051a012ec4323a19a81ef12cdfda84

  • SHA256

    6c826836b15d2ea9695328169d8d86f63e9468574b8177419a3678d89dec9b20

  • SHA512

    04fb10ef2cd7e685680d39ddf65f55d89b44208025a4d8dc317a18c38f5aa2606d1315e9274ead2c311b1d8d3306ff47c6258168ba7491a2600e679db7a3b3c0

  • SSDEEP

    96:uzVs+ux7+CLLY1k9o84d12ef7CSTUEEtyIBojcEZ7ru7f:csz7+CAYS/a0b76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d2324c61f5e8dc3095ecd78465c613c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1792 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b96805111a3bb7e816ad5bd694109fb

    SHA1

    bf6adcae91d6be0b3d30afe27d83b976dadaff9c

    SHA256

    650fe0eb11dfb98ac5fc23564a2ff15e6ff1cd8ca987efb926ecb56c5af2c0ef

    SHA512

    d241e88e5b6a50963957b515de2a78dcef4683baf595770cd97c4169443fc1f22eae971ccb2c90a960a1f937780c6680d9a6646c17d4dcd8b6d5c0c8eb4dc8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12aa593dae55ffcaa19da97557fa7afa

    SHA1

    208c9e414239d9c58ad50697033e66a810c0ed72

    SHA256

    2e67cbece54192f8b23539d605399fceeeeff6e2e93cd85db42400e379f03037

    SHA512

    2ea8071e8ffac3cd32f27a33e7241a57ed68aca15e31ad46353e36ced2432de2353f0a02d0e9868dc364cf02f0f1f968b69bfb5423955de57a543a889b044082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cac1f0ccb22ca0be37d1d4cd71169b8

    SHA1

    fdda4c6a276dc67bd952115da128a5f9c46b09e6

    SHA256

    23d069f47036d6a75a6042a2db56191e5c13dfdb6b7b1d68c4c53ff6a2ba3663

    SHA512

    7e85701e16077c11fec9fee431f95253464181f4abf73e3629e14b55ac2eaedc2bae647c2abcdf390fa5c7089259cbfd4e385225b6bbc586adae4b2dbdced27e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25b04da716042f0211b6a00a8e58c0c0

    SHA1

    c267408f3ccb2cb7c7cb8e360c9709ca8b009625

    SHA256

    266a5e3464669882a1194f24b185c1650b45efc4edf75ff9b7968290d17185b4

    SHA512

    6252b6828db6c9128c5cc0e2401eb40ade07cb7e7f7dc6634ac1dc06b4b89b2676cffdd92d719429d93d3a6ae5bf007a52d80aa95c1b4192c86ae8bb22d40f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccba87e3c8a72ef7e0d58dfd91dbc4dd

    SHA1

    53e33550ce06b434201a5f7e387134878fb8ba1f

    SHA256

    fa11f9c2e7dcc801df751ed683df7ed4c09e6f5840f42c7acdd218e940888235

    SHA512

    8d8508c159bd46f541748cc0aa37fc94a91a4161b9f54f9bac6a8d81d82506ca28a264b7eb5e3e2f69568d006df1f3cc27dde10e3e287b097706f30fc99e69e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6b444a447b10b30d53bdfa850b8bbcd

    SHA1

    b8c1f54a97ec7788eabb4974717207736d12622d

    SHA256

    61ef3cd206194988f3b9073a2e2aebd095c89a29a622ce7f4bbe8ded14320284

    SHA512

    b4361cb6ae087eb660c1fd612cdf19b53bfc8ab88379e86a5e716340226473806b0294fb655fd2812cd77e18b6631e005e63afbc7b1b3a1b37b01956eb0669e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3422c2a24874f6c1f83d378a5537e3a

    SHA1

    edb9148e5e24dc32a827c542def72dee4dc25f1d

    SHA256

    57e6f1b9e284afa887bf5b1dca00b565471e5c9c585035e6f0b37977439e4636

    SHA512

    85e2827ab0efbbecd904430f5587d50ddfdae4941937421aebf7c3b2ae63a54b87dbbdb2922d3ef189f56a7050c596dfa090e0d844b82afb65f3b6dca73a74be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ed5e1da496ac5059503db0790f36b6e

    SHA1

    3e57e424032e3c256140826dd47cb3a1f2e8ecb6

    SHA256

    56b780f590f2f87ad67d524dd640b305938ee90ff99c57f3772e1b63467baa0c

    SHA512

    f61ea64a886e9d93e06f4549af0a80c1f26ca15cb2be8ea8ca3d3886f261e0cafd69697ca97b0b84c2934c73f3a07c0c043def21d41a60515c7a7c4022ee01e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ab7bbaac21a97bb7c7d143c1eced97f

    SHA1

    386b06c6ebd49c55eaa867963c0b883e18282a09

    SHA256

    dc76a8856021aa1bdc9eb484ea4fb842ab5fea7c7f48b206f448cd90e5d72195

    SHA512

    b4b4dfe59be450c5d7db8a16f96ad844e723d0c337684a5e18c55669e1c8ad05da80afc44cf779fb703f758bbe899401c83fc4bbbc364f6a1832ecc37ba43798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    202a0354bae31ef9696dca00b06dcdc2

    SHA1

    9504197de6cc75ff0e0cdff5756c1c404619ea23

    SHA256

    33ace73b1cb2185feaca14b34b05b5551ee79594b35b5d1c7299a937b3c5e92c

    SHA512

    9b6dc6353ef65357ae8ee1faf816bd61d976f24c9289379e6450cbd1db2c669bdefb119ee972ebf47b46c7c842d6662293ed315ed634e924f2702b54953d0364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    012dbf328f32c40491caf5d6643a9032

    SHA1

    52346f66512c3df24cb06b42f9026dc682910554

    SHA256

    3bed64294e58e910d6c0e93113d2d3cae384c954cef1e2d1cd7aa34fd5881914

    SHA512

    f07f6a4b46fc0cc25f24f33f76e80a9305752606be246b7b4271838564871c3c84d0e87136c357ce395c1a1203398fffd353e0afb97137a10eecec584db3e7bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e7069e3d97c99eed57d796a18427456

    SHA1

    9759951cf91311d3e1ad2c11dcfebea93cd2234d

    SHA256

    ddb918919a9dc834959334fb93e69f498d59c8738585fbf5ccdfd56d484efcdf

    SHA512

    1183603acb5218f2c360e6e1cd83794b1af441769ce107dad23653dce2df80985ad2b44e6f3eebaec31682abffd66783243e09cbe82fdc3db6339d58dd872d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61a1cb7a39214ad87ff5883350a784e5

    SHA1

    5dcf08c89517b1a10507572e66ea3bfaf1190f79

    SHA256

    b24917e36876109e097e9971b29ca8b80e5498761c32613cbbfd4e23866e9783

    SHA512

    a5ad47b399450cc4c23a79f33518f51c6f04cb12dbbcc92ddee2014ce27cbc5dbaf4cc0283e7e5a1c73ae3dcc663f6cfb16ab87172dce8cee002c0e19e979462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e10b6d9491a957724ac9bcc2215deb5

    SHA1

    b7a5ca32f229c943e5fe8643b85898335b2dbaed

    SHA256

    ed77666e677015da790bb936b97be9de2681e3e05781e5e657cf2155a9b32da7

    SHA512

    58c38adc80604922749728df47fd085fa8980b2c1c5e61c50c3ab4bbac77d087300fb8795801dcaa1bab0c15df9b8daf0fb8f268f42101c48ea1886db98cc3ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f50f84c00229f4a7d0db555b79b1e8f

    SHA1

    78b622c8aac34a4c62026a52b4b7a12ced83730a

    SHA256

    c953d832d65fc794d46b517ef0a2324d258ca897f96f648864f2478495dc64bb

    SHA512

    91ac19c5081f6cad09f361b4bd3f689bc05cbad2cf67f2ee823d86bc43f679937fa00bd17bb0b5fc2c723d5196a62317a448a9069c1b6f904b8f31fcbefc1b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01408acda32b1a97284fa0e19bce31ff

    SHA1

    1498054388d16524eb2d8702307a0221c0a3aea9

    SHA256

    1402c581265db0cc121f4441431d20fe21ab570de6a460b24f206b3a7700acd9

    SHA512

    db72feb7fc1647b2d1be6ece5a32ffc21c19ef64eef9a95c9618da438d886fb5b5d0174106dd63c64de94aef806164c928423185b29f7cfd067c4d05a06e87bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a27dd49b2a71ac09fadbd57441a606f0

    SHA1

    9e3b3b3e65b2222785db3c9dfaf1d338eaba0b86

    SHA256

    ffeb9742fb440f3187d830945816025f61af74f680ffb94a3b46b6f3c6baf200

    SHA512

    ee8ae56f543607fa8cbfc2685b6eecccbec158ac774c47f83b6049f59e68f157e392bb386661898c0325f2e9f7d8f2cba6ccd2d4fd8dfb972aa0c013379ec509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a2e9b08257a47b282e4e4c00f9e85d9

    SHA1

    85c78593fb5fc757eba5f462fdc15c6dff5c138f

    SHA256

    83e11cfed4d375193411e184ff47de79145dd3e95298a786a367f0ef52af3fc4

    SHA512

    7230bd27a908fa27b28e3e6b9b8c8570d82bfb6812d1845fbc2a76f499dc76538e0fe6aa82d78ff36021081e6758cdcbf852aee621d2d0f3194377c998ec4e94

  • C:\Users\Admin\AppData\Local\Temp\CabCB9A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCC0C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b