Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 17:28

General

  • Target

    0fdb3d5cd6445fd102f9b138aa79641e_JaffaCakes118.html

  • Size

    12KB

  • MD5

    0fdb3d5cd6445fd102f9b138aa79641e

  • SHA1

    0437f3148fd9b69b5f8199ad2ab1fd9cc7e03b2e

  • SHA256

    613ca41ebc33d8425b208cdf0f87a20737e7bc915ad59c1c4e0d163ad30a51b4

  • SHA512

    910d8ef2c58f4da5c94a7085511c9abeacbb398c143e9b2db88fabc4c4730009063ac0d06666321f96aaabbcb8a63e2ea19d282154bdc5d003044470df3bd235

  • SSDEEP

    384:s9lIcNVojBq/guJBCZ6n+zR6R0cB9eguLZ:ugt0f6xLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0fdb3d5cd6445fd102f9b138aa79641e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2832
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2832 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ae46f91cc21973f81fd22b889087663

    SHA1

    d5a189843a7f9be2287b07c7efde0591a925f729

    SHA256

    ade0547a43d17e33f1e0a5762e6df64d2f4eb7519e69eeb1bbc1ae7e6a22e8af

    SHA512

    a9a2531781326a0fe6536180e00ebdad905b53fae4652271b16fd4e94d7113cf552e19d5aecab3f46364f740bce60ed5824555ed5332331387c135025a9a5a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5565845805de20741ffa1c743149909b

    SHA1

    08009a49e3bab7f616026c651ebae834e4a65134

    SHA256

    d8014c8511184696e65f233fa5138fcb8d3950074b36b2326fe265e3bd1a44ea

    SHA512

    911094547db1659c2dc0cca6d299afe50b133a8eebacc63cb07b670e4fad2c84a62a07e9a3b03e8e510d06a3709107b4edc611dd7ca6393472269681d8a57c06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    521ce9da996d664405f0baafffbc7860

    SHA1

    ce457744c03b7f8c4e3c595c1a66d186b403fcd3

    SHA256

    b195821756278d145e90cabd1fcd9bf6fe5a3317eb9adc78c47293811c555ef7

    SHA512

    997dbabea72c57a66d04de0f0ae3b9c03f23bb4fbfd1e7d019d9a5245743ff0cab4753de76936c9a916d3f7f7a3da6c29847f6a3c448623116f5ec4835f54321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f7b39c51a0deab368afda788cc2d040

    SHA1

    df3f7a8bf2ee9c5d4184e30585d2ba855ffc60f6

    SHA256

    8bf72756e05a18f58c1e6e035d6f9b0a9a9737143206041ca6f94470504235c6

    SHA512

    c4f0e536e713d1e575605f011bedbd1cf6b06e279ce14c26642f605e77d289d1e920cd5ba247e3962f1b1edfa6a78dc229492f787534bd03d31a0bf1a75e2b9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    488d33ea4a95ed94eb7696383bf39803

    SHA1

    4206e1025ff1836fb45aa4554948fc9cf135fd22

    SHA256

    8f4ae6d9576e248d965b92c285bbcde69590f78adb4d369f2923e36429262699

    SHA512

    2afef0d44302463a69b87246ccdcec691f8d452422d59e86614f7e70cae1a170ed261f0de97adb541298c17379d4be43ce9391ab4e6cc397c87e1a4889456cb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a633b9d07a3fd76b4b6dc371946cb5e6

    SHA1

    1c7be8fd78c64fbaa6fcae875859b4a513998f4b

    SHA256

    3f9e73b544422ceb850a20a481d8200d8b7537d262537b2a0178b6a483f691b4

    SHA512

    757e2baaa4e50dc362f665d422b9db08d70f20697e6612cc92c472303363994278965a587e21c30121845cdb38a9a313e23e4ee252d346a82435c0b6f5327cb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2a56fdef85b5dfef12141e80a357833

    SHA1

    2600d281cf7f7cbbd3cd4c27a4e9368599f79a1f

    SHA256

    1afdc7eec59848395d3c460f1d4a78148c7d0d6e35ad63d860c29875890b8da3

    SHA512

    2c85575c936a9aedf7db256e40fa378db6cb476fec65afddd9d08ee3216cc01f4f64bc5d306b35a960a79ad5cfc6c44d6692ec49b6d98465f9f1fb71e39ce177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7f54ec0f46f4a1aeab1e5b5571032f5

    SHA1

    600b196855667ada7f7c5383578018eea0509c16

    SHA256

    c639f979a25a1ab9677e867c994f1169d77b6cb668ca03248592077d2afb8fa1

    SHA512

    73a9008f9a373e70c5ea6706ac3a55f420235802a01e8cc523c1de3b7bf08ec48364fc79a91f62a64fb0f3959b731b7cd1c92bc677df5f8efd5cd0e5ebd086f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d35edd61d3df4a15e8cc6a1c898934e0

    SHA1

    1fb2a24847e75308b5cc1911fab98cecfeb38ef6

    SHA256

    3680ba41ae7f677e2b9a1df18a3a93a61ff5190e423573160b45cd5f59876f18

    SHA512

    340e15bf24eacaaa4796f39641f20a419b17acf5a7308581167f338a4e065339498599150a47b370cef36062edd755e2cc3e4d1be3d2ed0684465dad14535b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    980ab38905ab13cb6a8adfbcfb1db778

    SHA1

    e5fead0e4a54a962e5ec3f7562dbde3d8bbc1f6c

    SHA256

    c39dc3e28651fec8405e41175a89ecf91daf74449c497ea267af5832561c7a1a

    SHA512

    4092a9e43af5d7613339e561c494a6b3c25cd9a5f524d3bdcdc0c0f4f2f3c3261a242ca15b551b5b47410d5d68494a90b322598c305aac8d0858c027a0903caf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    470e9190103920070538c450e445f8cf

    SHA1

    34b51d1cd8cc0638539c48de7c59ede2db5e4f6c

    SHA256

    65d423cca0f9a81efd8a36ed09859572a2f2bb3d16dad1615f5d67c61cc65128

    SHA512

    2fc62b04fe760e4a93c6490e258e795a9e2d4ac15440035f422624504c138bfa4b6573c3ee5142f1793df4dcdb9fd4b230bdc5f69d5bf874bbd3c2638b4cc25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c658b85c7ff6f9456114431a89887234

    SHA1

    4eabec552cb45fde6d34f5e2ed73232e68c459b6

    SHA256

    cbd82e56db1126b91900fbb7c182d3f2437eef147979bdb91e0fa4aedf577d83

    SHA512

    2cdb6433f53ae40e54e0e462211a3780af48209364d41303be0bb8b945b9098bf6b617800485a0a9e24537f279c322f0512c94443905901920c884b724c5c230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8361420b1488231d20bd90b16db4e91e

    SHA1

    e52ae14ce1d087bf6b594e0b895b83d4375a9c9d

    SHA256

    29eaedfd7517203a977226db0e8503773e61871d4445daaddff4793fc28ccd73

    SHA512

    8f886a51ecbedd7396d158317bdef21fda3cf3519d02a9025f42d8c7201154d87b6326f31149a6ee77d4bb7db9e97ec1097a6c1e15e5fd6fa460f786b43f4de5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01418f8423b54d71398d70ef7af1b8b5

    SHA1

    109212ef6be71f36fa042f11917bcfdedd40b8b7

    SHA256

    58da0752f0d97699d27b476103f3caa2372253a4e5ccc516ac657601c33ee33d

    SHA512

    50c4050a5d0d8563ee03955d05f7cade4117e10b013447aa2e82af5e66f576626b04a2a167ab9d171350e3391d6054e3d1df42b6da6cc2a4f02dc74c0dceffda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83907b15ea05e9ec3104d0b67527a94d

    SHA1

    9aade9ff2e5c2ad269e9a76a0f3196fcf68eee05

    SHA256

    57b7b5717ccc32e65f80069a0638df4ad5e993230796f96d8147775df5736738

    SHA512

    e6d47be52beaaf12d2baf597e21cec5bd010cec0710355f8eb5e1a7b423a2463543b430c2383f0fb1b99307066278ebf976dd8fc2eaa584cbf8a191a69d46691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e10fa8e76d7fc32ce49c4634f6e5425

    SHA1

    c170b84c5a2d7793275387c21090b40550807e9d

    SHA256

    053104900907e485d88969f6817e4820f9d6cddf9339957d1a4e5318745065a0

    SHA512

    8d0e766215897dedbd416edb60b2761dbf6816fcccd63bf65e2bddf50cca4e58e4b4962c3a773fed162704e615dfd9bd1db0673a43a8e3ffa87681a235d52afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a879b5de4bdbda9830f759c73c405e3b

    SHA1

    7699b80b7588a9e6fe7226dd02f3e7bda2a28b45

    SHA256

    e9410eb5397f2ae5b3211df86224dc47cf87367437d32690701a7fb075f8b3e8

    SHA512

    21f043e52a9753b19fee0473db7abc9feedee97ef7b0b5528da740c93579f00aab5b5caca70f12d7009093c8561b380dd18394be8d7b435d3b6b199f9d2df3e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49f066f4b56861f7524cf233de182bb3

    SHA1

    60299ebaa93e7ad058c760716df3c991eb433a75

    SHA256

    ac83cf03f42d5c6cbd15fd9d6669da4a7fd9ba4e77118c6cb704577e6adfbb1c

    SHA512

    fc16ab5f7e95b3bf2d86cd1a50e481d4868c44776f0cfbb455096b45b4e6c782264b0d2c5d53abb77dfb04b8dd2d25a976c90ed3e3d58d91689bb0822126ab4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bced1c0c41fed7772f24fd9cfed8705f

    SHA1

    6b0d2a0ae7f7b62d5b7aaf6f1c74f7fb74d572be

    SHA256

    8b40da93448d0038ffc7f31974a142edbf00b4d139cef2d995cefe70722df6a8

    SHA512

    35cebe9d04071beedfe5d3ad463b62854653bff9730a1af5792eee4275449689895a25eda5468389277ecc44b2eacf907ff74fb9ce8438be0eb210de45a3a342

  • C:\Users\Admin\AppData\Local\Temp\CabDE8C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDF2D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b