Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 01:39

General

  • Target

    114e29300c8c2b0719ebcae23ece2643_JaffaCakes118.html

  • Size

    10KB

  • MD5

    114e29300c8c2b0719ebcae23ece2643

  • SHA1

    c6b01f5ece2d532956deeaeb428a31cb278c888e

  • SHA256

    7531311af83fb838276fbb3f1f5f1b66a4ae05c48a13858074ee129b756a9716

  • SHA512

    999b8eee59a60408858c97e34a6741404b5be08ecc955a15a5ca68af38fdd74e06f42e7cfdb3bddbd6311e822dc84c16d495be9f59e1f791dc7ecb4039659138

  • SSDEEP

    96:uzVs+ux7z0LLY1k9o84d12ef7CSTUQGT/klspO1usdBQSlVHcEZ7ru7f:csz7z0AYS/RIyN9PHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\114e29300c8c2b0719ebcae23ece2643_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7506b93a87f428f79b1687b467bc34e0

    SHA1

    c6cc9feca2698588869e0be360ff46284200860c

    SHA256

    9169b213e2f3d1c4f3077df7566958e22e43d20d633636f5cab9e71f6bd663f1

    SHA512

    7ab62578282c0a967df0df028ba6c7471086732efa377b1b00d0439cb59296f211d6176bba962a48173b87e939f9ee01ac85b28ae2c90251ce9fc747b9b86ae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e12b71722b1fcdf13502a81a11278ed2

    SHA1

    40844ffe906ce4e34f543c30a2e62213eebe6c6a

    SHA256

    490344286d6b3e0e1a32a5dceefb2b1aee175a4825b8d0535479f994695cf873

    SHA512

    d3d3e59f83668ba83a2b955f2df131dba77c8b1830973856e9fcc58931c9768212a09718f99f7b32a1c886b47e1d93c8526af68d7b1c30e2130f25bad4858cf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d346241bf55175b302d36fa8df513f94

    SHA1

    b2e5cc79e107a0b1982bedf7c5dda20c3c2579d8

    SHA256

    6fe5c04378d7f0259bdbb7f29bbbc1b766e4702f2adc1959beb18f15f745a31c

    SHA512

    43905e3e27039e04ad2573f9bad7ec989b175884196af5845618491fadff2e91d1056cab2d1bcc712ea18d6b6207fe77f77d6b851660b3c340930863baa7d4ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94f04e056ac7960548a05b48986e8a97

    SHA1

    d5fba76abd63dfb5a7deac56125a806659eb311c

    SHA256

    2d54ef7b903bfdc427b875381bc2738ab76ee149a6afe917834078eb0a452079

    SHA512

    8a431e84a559854400b2f4ba35137f41ac745b2feaa5b22981108951add399bd63c11fa9799755e08c90d2212995484b3c05f74ba797b8e10034cc64d4269b36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0918499415eae196f283dd7a71f4d738

    SHA1

    2d95824f94475d9122191eb2a9b27dfdc165b88e

    SHA256

    866f882f35b6ee097de7badf0aa6e58527b0fe24e53b6bd970d117dab455c72b

    SHA512

    b12b5863f100a55b6a89d1852d1c09f5087bb1902953476ae0daa08f9fd914f1f80b98d28198503c3d2bceb22c0681c5ab63ab4cccd987b5953b79809d59dcd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bb1a68638eb48681b8850b131bfdb3a

    SHA1

    1845f33558b5d05ade48e8953a00d8463d870918

    SHA256

    52284d86e3f59450d0acbf98b67b776b92445c829bb3a27b3f7a6093ae61ec62

    SHA512

    c4b09059c8a44e16a6abdacc1115ca235dae5c48e0e795dd1b09b8b269681021dbbde845d4b6b6c3f437b4668680712da1b86c28d3357b25a4709723397600e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1e45cd01cc3aae0d4be3c918ec288d9

    SHA1

    c0fd792ff7973c8e5d1fe18ffab41b80b998cbd0

    SHA256

    f99daf576bda4e2faa2064657cfa2e2cd6ed6ccce79aa9e797fc04a031412fc9

    SHA512

    ff4ce5ee5632e38c7a097420392dcb7e2c9e3f508055e3cb4d5bef5d291e84cc566e34182febbd0ff648d27fd65ed689278614010b6166fb6c8d2aeaaa16f825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f50c2963252d5c70bff8561a78eaed9e

    SHA1

    178c0c51e14d41551f3fc9e007a0ca45f0e7b486

    SHA256

    881b50c1d9c99f550815e35365421bdb98c552dc3d59cd1fbc4708993858cb1d

    SHA512

    5c44072047d38ece38d4166932c8406fc37deed34a86725c01802a9203398a1bf40bf287ba8518bec9ab1fb7996e098fd9c96c762cd4c09ddaff85f63cc9524c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05e9c76643fcc756c7e58cbef11560f0

    SHA1

    b456fa26e7665c38e49038511fba0979f3512b9f

    SHA256

    f0c76b3591f8b18c5f7fb2232dba7566f9b01ef4b0868fc985a8739fca6c5b2f

    SHA512

    eae17abd232b515d29b9e7448ca95c803ba2790c57f5371a57c3e796e94dd584c730e18a72336551279c58e3434e3c49e3aeb4b886de6caef4e4a6f766c0ec2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9850584f3274605b9aaf09fd8f7c55f1

    SHA1

    bac6db31dd60025f17842931276dfd67f4d778e5

    SHA256

    43d423d39f068e936a28a73270fd5a236d99c35a275a18606f3e60d764e1fe74

    SHA512

    32a2c9f2f7ae5a60606c66d2a93468484e2d23d2a6fbdfebd3939317374686199621cdf82adfd0b295e8de2be08df8badfd441ff5185ede7aad363bc0da9603e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef60e88801be6185b0eb69ccd7f9e43e

    SHA1

    85935bc9f9538e77eacd04886af679fc87392891

    SHA256

    bd86693ac2811e9ebd8db58e6cfc6854761384b08bf87655813f91e3b462b9a9

    SHA512

    d39da77f0ede3278d304f05f3f47e5f9d23bd30e5a42a92a0d9ca70ed908783c1400b6b559fe6aab27e757424df52e14eca7372372abded2e246187298724ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63c72af0c2a8eea1a071c3a472d6f155

    SHA1

    17168cc44300a87aaf21f90088f166bec91ebe5d

    SHA256

    8ed44b49baad6bd3aada48ea4b21c40b06660cb6f8081fa66a1910d58949e8c0

    SHA512

    0f70bfb402573cfaa2481f263d6b844d9adad8d987db47d66d08c86c0feb77287929e7079ef54d2c81314c61fe9ff1fc3ae5885cce9deaa14628cfeb0cb7d20a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68a26d436e6f6c7e8271af0dc058f4cb

    SHA1

    aeeddeabb02dff51244e5c1b5b61896b5696eaa9

    SHA256

    4b0ae4df35f99822776ea159f12aa0cf3d63e15b89df72c32522e1603876cd38

    SHA512

    2b5ef3cc8594ed352c1f383ec9b1f3e3e96cf5901100122ee91491ea5722e9b08e20e6b777b02170e4503003213b0a29c42f26160d3f55f99376c27e7728ee83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6dd818c5107a411843fb197bd8dddc0

    SHA1

    6cf8feeb3434259fa27607d96157905243436175

    SHA256

    01d18892b5a3d1a69a41ec5381d116edc2234ec4ca392f80e6ca7d83b72d1446

    SHA512

    5bcb58d41a56cb093862b6f04d1e45bc33277a3bf5c1b9cd0e1992497249b7d3d515bad31491fcd0f06912c13b70a4ea8f79278fadeb9b4b1ccbb086e7a81991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fa418418e0862cf61431ae74a638ccd

    SHA1

    c92f93d22cbadfeaaec4667312570af1a85de917

    SHA256

    175c336da86a650901570715c506b22ac8e8c88e4184f8911352f5b605c8d0d9

    SHA512

    b5e479fd9c30384706e7f7cdced4b6de334c21cd04b398e0df4a8dd272a310ffc554bb21f04fa8fa425f033653a470de426771b71649f05a8c280d90838fe723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5fe7bedc980bfc19bd8aa930deebecc

    SHA1

    f91cb0b3b4a581015be2bee955adafa4527e7894

    SHA256

    e33562d1c29990aea00d146b08ac438de7d898706b83576e5b1bca058ef9b9ac

    SHA512

    b8b3a3ac899d0e94e1c7880206eed2a4280adf1202eceeb7b246cc1e3c441af8d26f303989f989f0d9b346f28d0921dc5db396821cf0b25251eb110352faf44e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e105856e8ad72d5ff0fe78a0967dbdc

    SHA1

    fd1bceac472bdff40675bd0e0939d5e8e9d17b37

    SHA256

    e3cd931b603f547b10775379e8ef7791e00445c021e09d2fc8b337f29715142e

    SHA512

    007bfeff2c88d4fdc988e14025b3a3f18692b8d48f695859173d737b343ef1927e28d14a29659343c976819b0b975d2b8570cf90e1d17c71106449da831148b1

  • C:\Users\Admin\AppData\Local\Temp\Cab1C5A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1CF9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b