Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 01:12

General

  • Target

    0d406fec156271b1b459b96891aa0f6c_JaffaCakes118.html

  • Size

    9KB

  • MD5

    0d406fec156271b1b459b96891aa0f6c

  • SHA1

    d6052f03a50fcdde40b0ccb1a9751df65f4acc7c

  • SHA256

    6aeb440df1d49b9d3c509ab7de4005653d27737db763e463a07e236c87a5a9db

  • SHA512

    c724583e0c72fd0ab57a5733dcdfaac75c86acf9662d3687191bc35c9791826c47ee228241dc3c1d781c69d68dfec2fa8103da12b29c36c309bff7ac6f7e157d

  • SSDEEP

    96:uzVs+ux7mx0LLY1k9o84d12ef7CSTU3GT/kNQpglVHcEZ7ru7f:csz7mx0AYS/GkgPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d406fec156271b1b459b96891aa0f6c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:596
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:596 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43388c3c8e1c7bd90f0d817c238e8b41

    SHA1

    dfa91f474720e4c636867a7cf148ef4d0061de7b

    SHA256

    623f20f7a8b6fe52ab4aeff9f99363ab7b44f65d8bf10264c0bca9979361b108

    SHA512

    b46a3e6301c1aed9cb471d324803f107b5a58ceebd6aa7fd06dfa0ff9450e10c358b6b88fd35aa55c2340bd4744b2809002799b5929d4eff321e6195f498c41a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb7775b298f115b1acc0e99965d0966

    SHA1

    31a64e011b584ace507634043d14112ddb099caf

    SHA256

    ef0fe57901010ff4c86e7af28f255f18604071ff54d278732dc2f582900bf798

    SHA512

    e7c4b9d58f7e9a34de99219c79f7a60ecbec3f0f258d87af4f47de969ca75a02d0ba7084d083a970ed2bfc76d6136ccddf2efa2f08f4ba61339519f22761d384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    885ec58373a1d735e1cdec0425a6a858

    SHA1

    788c82bad6ef10b856c3be17cb9ca0ac525d5e5f

    SHA256

    1f4488a9bab187403307cbc7f7450a5e27edde7a8eed0e503da748084bb1ba99

    SHA512

    b192231e46adf4f6147a878fc18c382c26f81908db174bf2769c5c802f84c71ba937d90176c10914317187d22adb7b73a369cbb09409f374319dbaf595d1d46a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40e567d84a45588681639ea5a9dbc226

    SHA1

    ce512d8bf5977b83fe20a6a32897a5872d9d89f7

    SHA256

    7e53743b5e5cb8e7943ef50786b2f1e4f845dcccd3752d7f01d688dab5c7501d

    SHA512

    dda8a5ce6edcf67b6d3ce0f699fc547c79f68e865e57ca07cc0acb797e35497e9165ce529cd9f8f7d171501f1a9e51f13c42c1c9b529435ad021540108b2c619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94704bb7653c5bb9c50a0215ef69ae58

    SHA1

    cfaffc08dee080e3d4137692b5d391c605d9c625

    SHA256

    2e7c319ca58857884e855f58ef4567c61404390e9224a06c0e0bffec5af0712a

    SHA512

    ea7c043bf91614d3ac3a63685c23f085522de9aa711203db913d8dd9aade2f82ed94d4960e0ede5efce67b2f3ba744e343bfbe2f8a9fc77f6ac791eed658b6e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a35d6a5fc5ea481e0e33f09cc890ab0a

    SHA1

    d115be67102f2498e5fd34c4287b7ef93f4779e2

    SHA256

    6aeb9dfa18a626a3c833e0bdc3cf718e01af63d240152e1b9d4dec49ab9529d6

    SHA512

    5e657a181874751dcd569f93a66a9ac8799f067573d49704cf172b8623c2796ab3dbd82cc6bace59d04be4b9ea0ca06b0f0fc1bf21f1d52ecaa60fcbd46ddc4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0d6e8a7b49b8417b7d4968dcee324f6

    SHA1

    855c170a936b2389237309f75ec9fa0ff6637c13

    SHA256

    306398601c6c4d56e366385e74785a3e652f1a2879f5bb815acc742ba07bf945

    SHA512

    7747f93539904bb2b6b16d2c43b780bd69ac3a56c22a274c3a2849b10230e373a8a09b0778af0347de2fff1ca6d69824933eea13733a355aab56536c0eea9499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27dfba755a94c482b81350dd001800c9

    SHA1

    395df0994cb3054a93dde3b784b550e264bf7ee5

    SHA256

    e15f2cf846ccb72c8df75b076d23a1ec41abca7024b3ef3d75906795e3e6954b

    SHA512

    5b19ddede2a575268b951bc0ca4bcd68c626b6016a3459fa6095fdcd6c8f770c5a6815e7119db7d8d3b88962dc94714607b99513ce38c7563e836b00b19aad4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e570ea4d8c955de9ab290c772dd4655

    SHA1

    c68df333b443847d5ff970d440242b2537a22ae0

    SHA256

    44d5b93b21fdbe447d34fef2c7d4f7cb72fdb6997b5bac83853e83d23e9e92bf

    SHA512

    d911c136d5870e6fdf79998e931611dde4475f21fb5a664b8ce9ff576042f9f350f4d90481231ad3f96e8d7a8c6bcbb6f58be2d4bc91aab6e029fe92da6c77be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b533566e8f383596329d6a37aba3c8c6

    SHA1

    b7e2977ed82cf6a03a7da249a85d417830f6feb4

    SHA256

    2adb91c585f53da406745bba89261b35b2f503b6463da13befc7f46298d8d44b

    SHA512

    d086f0198f4e9b609d0b73b01499c381dd23a8a03de899520cbb36e165187bc44b786771d9a81d3557185aa49c5b212283a6f8740b438b983cf1520e22a4f27b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e716521f3122b809efa8822ea5343d17

    SHA1

    8de9ad8baf8c090e80d3fcd855a16daddceec96a

    SHA256

    52f8a818512bea0b49578645f3b705f5c9742c4fdd56458bf2110e4fb7464ae0

    SHA512

    df4439266771293099d7db236586e10f760fa90b13d4ca15fd827b56f6b0310f18ad8da059426f7ef8c15a32695ce553f92c921f040aa3c7ff48e7414f1a97a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3e3d1b63c4091b1eab36698b69e570c

    SHA1

    06c2beb7e3d28504eec189f8e3ee09f858a33b7c

    SHA256

    e0d247f1fa00e349ce981c9765d61e9d5e06a1187c3315fa92aa608df1b668fa

    SHA512

    979dc8ede7a05d52d6d2af3ac02567c4a74043ab42491c1721a45b9a43795943bcaae2f93ff6adf0304460fc3ae180aeeaefbf09b7633d97cb22474e1999a500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72d1c43dc18cb39345d8e62d1f06f33e

    SHA1

    519a4bb8546a6cebc4e8488212c68ca9c52734ee

    SHA256

    54f5fddc1f79deb1e7194afb26407326687c0d4b94ca3a93f407cbfa1196ea99

    SHA512

    395ff56b87b75985604c956da10054a4588f55f7dc77698e36ae71a9d7138a3c114e2bfa5c7f0b4c5a8946fb1b77527d723a4cdcdf3d92767ccd757ae0a36960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69cc3e1e137e7a1f29ff464609cc4ff3

    SHA1

    8a617e23b2ab085b6637d9f47f6203ac29877d86

    SHA256

    eb929b0618d25457b422fe868da1b2f18e2dac9ee6745ea3cc04832f8799a894

    SHA512

    93e6c015f9508b53c219be86083cc6689b49c1599ea8adc926d174d739e8290054f69130159ca02df6176dff02683b71de7c6be76088c6c830a574200571e8b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e473c125b928f968ba09a5efe680b88

    SHA1

    7d6885698491d2f848e92e77bc091285c9e7f375

    SHA256

    88b03c587cec96ed4115dd6ca5582a6bb34fcdfd9f54c61518f8bb4a53194eb9

    SHA512

    0ee7f5320f0a3a63bd4a60c6fbb0a9f04b2827d8b7f996e3c0ca7717dafb03356f08cf9628a4093671917fafe6886e7aeaeb38a49eb42913ae85d8245e33f758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c4dfea560a0fbbcce696d5f2d8fdcfc

    SHA1

    78b986d0f3dd1573478ea7acb3f07534d7f29e2d

    SHA256

    dc4213793eb2044b816b280f9ef8489fe65e382fc8d0d504f4ed572426af25b0

    SHA512

    641d137f26098aa16982bed6b8c18701a89d2311ca144ec2cc6963127223fb84618f4d4c237e63da30282e67426d055faafb060910e5a47ec0ffdda47baef763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fa1466c901da7a690cfb62e306727a3

    SHA1

    7469cba2cfcc7096ea1660bc179ec9a098a359e5

    SHA256

    adac4fea162bfdd200cbda0dfe708bee73c6ad2a65d702ea9645154896b130d5

    SHA512

    7e1062a0f67d46804c19dbf9a55f7a66f236feba7ace3e4bfaeff36d0849724d22b33f2c22370a495fb9a4e0efe313309735ddbe67ef74c5e88dca49f2a2e80e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dc19ade78505ac3cca687bdbab1a250

    SHA1

    c5ab54ccd9816dd359f120cb9d5a6157f50af47e

    SHA256

    0589e34cba139527218d821b6c0ea6e8728976b75c012727dedea8d089a661b5

    SHA512

    595e5365a28980a4e351bb3e157cc6a342c42efe702b4c5ed2379c70093e10e09df701797ba28c84cda20a5c39c2b79ba191e6133ca3cce4229aec9fa6953e54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c24b43dd9651f9e8cc150c303ccd16a

    SHA1

    6eea90e3879e2df60fb248a5e193eb04510a5f4e

    SHA256

    5b55ef6f9b812cdb66d4d40ea71c17ff56643d7f35fb1256448d0e9003c66e0f

    SHA512

    d69f9cdc12ec806523ce2fc0fc6f414cd060eb7cb95943b4a7d4f981bd2e84a84535f2f751fc3b908ded2b39117ea0058ec95b98129b585dea9e7902be27b9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    406c2ba438a6458914e6d4e7049e633d

    SHA1

    947422970fc226e78011a77c1ee33d1b336cff18

    SHA256

    8e5443e7333dfd8c985302fe9f8a96aa0ff59bae04742fb2cd7ceeace5bad5cb

    SHA512

    8f74f2a836f87a5d4d5f572a6c2edd1617a75058c51051c62c27980ec7219e38b1afab394ed2222732d976283f9f62b4b1a9859f4ef9e64cc866e42961694afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f009f46503c8eead3740f12e7299c9c3

    SHA1

    b0991626cd5ca6b9507f0dfaab206f670a2871a8

    SHA256

    24d649fb137346e6c1e8cc9cc89346056d294875f72bb2831a3b2dbe482702fc

    SHA512

    c2f0293b3dff201f859263f7aae1ea42f084bd307a5a72ad330b68a8827c7e3b96d330236bfa5483e640ec34d7559d63a51fb8ca75acab5ea6630ebad7c3e71e

  • C:\Users\Admin\AppData\Local\Temp\CabF422.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF482.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b