Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 02:03

General

  • Target

    0d6ab8be4fefb23ce326241c9c060309_JaffaCakes118.html

  • Size

    53KB

  • MD5

    0d6ab8be4fefb23ce326241c9c060309

  • SHA1

    25d9f2ee2d9a87797cf4b635542a55ce27249b36

  • SHA256

    9d11d9b25c7a42cd96f0e67da97e6bef6dff72847a40b98fd9ae16ac7af435c7

  • SHA512

    8e7fc35377cf39fb1e8fd9b272f2268c2c6ee473febdd20d3d4079a0a9570a950a79d484cf46fc3f2ad6728acfb9821b0825bc99438ced29be5fe8e148238eea

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUh5runlYe63Nj+q5VyvR0w2AzTICbbjoz/t9M/dNwIUEDmU:CkgUiIakTqGivi+PyU7runlYe63Nj+qG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d6ab8be4fefb23ce326241c9c060309_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80c4b93e6cbaa46b2d116908fc87ed43

    SHA1

    064c8181f29dd94d890003f09f0dea34d0e69e8b

    SHA256

    0b25b6e649f1e8a9a1a31c6fcca7a62779ee4de3fcb3f615eeaf4a21e59b1e32

    SHA512

    acd8f3f0669cbe2c7d34e24415b966012cc34873e1d4202c8057efbdc5ade1734ba2e19819e285df7cf6c33acd3b86782f1c9d00c3ba740b4405614557274cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efe3331ff853e8a6a1b737d21c2b7ec4

    SHA1

    826e4c38f72ab57d67b573c36e2e670f97e1572e

    SHA256

    3e42f1e7bfd3e7a482ab81ab3a6c067a77d6e802605d9328d918b3e9a0e84250

    SHA512

    8264437045ea6098f1db90631649b0c48cbc2c50d3dc8420ccd16dd3fc618a30c9171a5079fc372fba2c4a8b8b803f6a024e49c5e09392c90f94d4aea5ab0938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2ee20fedae0501c8f905d34e882017b

    SHA1

    bcf78b04c35549e6827fa334f15bfa092810ec78

    SHA256

    b44a93890938c33b1aa9be79de4c0ed02e135afc96fecc362e924c76f57f1931

    SHA512

    7583625ad9eb0704e8e1b289fb29919c5a121e6aed23bb5e0a784c6327c964eb27dddc5f48a421841ff41bad875409d5c5c27aaab789d106cf0a8f5a36f175a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc102b3959621d6df08f911e7374f664

    SHA1

    e3a51ad230c68ecd932c9e2393982bdcf3c16f34

    SHA256

    55609d21feda66744b92a5b36e414ddc33c1398f7f70cdd7648b4a81fbc4922c

    SHA512

    aa023dc8beee314fd1226811f389a8090061eff6a7eb275ae0ac42598869f7016a3031d6609c8d7df02fe943b407546b4aeaaf6b33bc1510eafceec2b52cad0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77140088c05f1c30523874befa339435

    SHA1

    57170d44edab9556f881dc874433208964bbd49c

    SHA256

    73c641ed642b14545003236092c860606a2cb17342c1d9af1a99d71f64fb28a1

    SHA512

    a7db5be3879a0623c443aa8e995295a7bc08a436a2a05ee59009bd00aeeeea8e1c15090032152367c4ece73e88c18c9d9a255fafc8f3e1ff3fabe8d3b924c98c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27a168de4166600d07a2218cca763fc3

    SHA1

    fb3eb522d70f6152a694015e4eda46f9a8cca812

    SHA256

    b3eb31a981ae639922c3d2beb8bac1343636783f259727937d0054b99a2b9fe1

    SHA512

    22df8f16459e17efea56b0c648bba975c690662bca816abab8cfddbc6fe84bb25ddb8a8b78d0969d758f76fe4cd4a038071a63340cb0002e4de080b3dd9bfe12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c742cfaa8c027aa4edf07c0887d0377d

    SHA1

    8db97d1cff7acb2c21ec195e74d35b5af7af0eee

    SHA256

    f067f5d7491646786f384bb222b927321245691150ca5051525dae9938a99693

    SHA512

    6e05d52c1bcbc39af0bb146ea433dde62b7f5923dbcea06d31c54711f6ae24c59043df4c812ff8dc4179290180cd8f238e236486fe9482cb9719b996f4b8dd19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaae6040d1951a8f90e1dac1234f0c2e

    SHA1

    23979248bad359cc5fa356310e0fda72bb05a560

    SHA256

    665c272777965da10705ce21388512d80d2bd4fcac2bf95abf71868db42d0b8e

    SHA512

    9fc43050d80faa6bb827dc66470758ddf917e1498144f6277c79081676cc405da033b673fda440842a0bf2b2ede50b3606834eef31b9d9b13bc827ee5338b877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2066f09450c0888d2147306f42d320b2

    SHA1

    d4be7c24edac3c117c2144a4258ad1f76beeff4f

    SHA256

    3c227cb32877fdcfa7c67e637c689de5250f9313e3fa6985d14b54d1fee180b4

    SHA512

    c98f224dd68314a91a58f4823d7d7a716708e84580a10ff1fb96d956561d0f669c1e5f81715ad02d3bc27f933d7050d4f16c37dcc4234882037af8eac3119a09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c268f84a0886d1c14ec933f07dc5e40

    SHA1

    913b496b6357e6523070ba7b65f7ba950e62f878

    SHA256

    c6e53e95b07e632b192c79608643128b7663d2f9f1a564a87a6977e5da6f5b05

    SHA512

    a184d2417dcaaf3c8a60f6faef0cd7868527aed0b8da85cd0c2b18374dcaa89b324fb4a0716fb502689e3918f1568ec89bc169fbabc935a2a8b28a195355fb8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44d32412921a06ed11b32796ce4b776b

    SHA1

    bf439f08708ee807c57297f37dcdc51d8958f70b

    SHA256

    84b28bdc2d86ceb23ce24e31729a7c41d238af12769a68ff276bae18cc7db7e1

    SHA512

    f1f2cdf71f62f7ce44201b505a426460d5134a8bdac18139284326f9ed8e5c0bf9c5d8a3c82822b53e826f03a27b33f5b69ddf281abcc3efded2f9c03f2e190d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    265e84c0302664691d238639d036c512

    SHA1

    5aecdd8ad6c4fc8370d3927ca50c6584bf79b0ac

    SHA256

    92ce6bfed2b565c3b0a07554f5ea2f746275b149a5c96b3f6efc2ffa0a1e0f44

    SHA512

    161a2d6d337e1a4e068363eba88ea7368265077bed6bb87dcbeda844d6ffa97bfef5e1f03b0174ccde7d3d63f82c3023081d383f9480dda0210afb980e40773b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f3ed96d8e6d2bc5b80bf3fdb1e031d

    SHA1

    7fe1d9fcbc2b54a7fb85a966e064c1c50f77c905

    SHA256

    a77807dbef5571547ced5e346b3f4e00e89d129ecc0993b48c490443c59a2e76

    SHA512

    67f687b9d580082390ff4844eba33cc8049a54634cdfc81b88d36219c6904a861c6d47bd8bb1c514866bf092ce6a2cd6e03b54fcb9fccc04fef9ae9e7e267c10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f837380396c5fdd1e580fd734c3a78fa

    SHA1

    7f8dcd1f333f36d701da5c921055fc89fb8b0608

    SHA256

    8c15152f5abce84eb6ccd987df3448a537909740065b3da16b51f7f828509eda

    SHA512

    aef05d79a918304602b45d0cd50ff1f4ed53a9f0e21e2b0ac455578967882f7acc62dea4698ea22f350e728ca6dd6be44840bbc76e4ad5696163dfb5655fc557

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69e6491a8365c93bdac7785a3de569b6

    SHA1

    339813fae79a26800c6c0b0dc59b9c79697e2271

    SHA256

    67e593fa14e048bfbc0c75179104dd36466b942aba710b81bb3143e0d9ddf5ef

    SHA512

    e6a32c9149c99a17b7a657aa27771dc9d6b7f5a0969010696a71a301779892720f9a77f2d764f8c77ddc50ba98a2b0955c053f5d84e7a9585634f85cf482c5c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    205165c54cfd23b3febeb53684b48d5a

    SHA1

    861510b0a4616c72e6679b43f0ec094a2ddb0e68

    SHA256

    b5ab7231a4529c9fe811d0061ce9694abf824e8d5c3dea853ea2e75bfc7446a2

    SHA512

    06aaf9d28cd835193cf9942b84c2118025fc43341f5a9df0e82d1eca1a89fd664ea20556e7c9958334b724b92ad0a7fb1419a4823556f2269bb8ce1255041b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26f7c36455e4998376027ca8f5631c19

    SHA1

    32df413df0cc16cc31253a671eb8fe3cedb348bd

    SHA256

    c4b4916b569a124da0bce46d4e486e60c78b551984cc04d685f3290b2a1bc8fd

    SHA512

    f794463cf7f0f3254f56d742ba65d57e8ae74e37fc4ba427f5ffe6f48f8c054aef35fcd72845594a05d2f82d85ee55e980488d0921f5755876f3dcbbb14d9eb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0fb708ec8ea72104b4ea159a39a1ed0

    SHA1

    a06f79173a870c2d1adac1982077f83408e680b9

    SHA256

    bfbd9f0f83bfbd14fdbfb3605908062c67d81fc65fb34d692d51bc6c1e66c1a9

    SHA512

    5dcbc8d768b45059822ce5dc8158e041aece0f6bf534b545fd7ff0ab4a147ab842bfc66917d1923d3cddf4191ffedf16e57d9e8b99386faa549ade964f13469e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    201a1f7dad9434938b67ef97d2881160

    SHA1

    15e82fb174a490cd2488dfb534cfb9fe76560c5c

    SHA256

    cd3b77ba98d4cac2d52bc820744b3d589417618e8e677dd469abe4e5dd75f9c5

    SHA512

    c270ae9855d1dfa5f3f5eb17244352f1f52f82431f5773dd0608eba510f78d35364d139c36684577c600509e6f68486a190bbe204f1254e6053fca8e27f86258

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4TQDAHL\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabE0FF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE19E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b