Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 03:34

General

  • Target

    11aad2849a35581d47cb670ff5d0c533_JaffaCakes118.html

  • Size

    1KB

  • MD5

    11aad2849a35581d47cb670ff5d0c533

  • SHA1

    923c8dd9bb2a81ecba6506b0f70a1d23f9898bb1

  • SHA256

    9042f1cfb1405ffb69618a58f57b4ddedfd6f1849d65c9f062a6d878df14a4e1

  • SHA512

    0596c703b70de940c0a2e22e315ef19f04f12db3c765947138c894ad500606efa2faa412ee63ce2673934caf5260e5fe070a1890dca684bf9fcfc0675ee2372f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\11aad2849a35581d47cb670ff5d0c533_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2688 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7560079976475d4ab76c4bba894c435

    SHA1

    bad56f89e743a93fac408ba8ba3fbba02c045181

    SHA256

    3e94832746db524419c639081c02b3c77b5e758dd8be33aed0768d143b99e225

    SHA512

    92803474bf143016b3f8cd22b15d6fcdafecd9da37879f08676b67b812d8484efa5dd647c63727b3d6cd7a7737c5a7f345f5c08707119a635970d511388f1eaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af9b48c70ec3ce34ab221f895e634d61

    SHA1

    2e5c0fd08899ad13e9933f16de35800f419ed588

    SHA256

    dae4befdd217b86f2228ec615fa4d658d8305f8c46130418b2ca3471204707f1

    SHA512

    96a5e6f8cae03f90b2f98d12d7d8c475f523c49036d8cabbd2dbdd027f1c73ee7070dead71e6e0fcd45ce9a711a3065b7044ffd4710dfdb05ad518a9ffc7c942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1115b733c881e3514242863580e523f9

    SHA1

    08229a625545de5d3d2f6e51c190f7cd4d6d2b86

    SHA256

    bb223dec619317bb682be85155387699fcfee7e03b3434bc4aae37678612cbe5

    SHA512

    6a22d25b7ad4574ddcb4f53ac5c406842fa6a5ba19e4b7be18b9f7707350e98deaa6ba5194abeb931ff1b12215853ca2f1937daabde31b7d2cf189e0a79a56d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c365cbf5791d3af9082f4eaa05d8abdf

    SHA1

    cdeabcd79627e529c94ee1ade57c0767c2daaab6

    SHA256

    64dbfee69b32a666d3e876ca34a568627cbc62e1e280c31e711ebd21e448205c

    SHA512

    bd351bd1bef2f5c97d993a543f6363add35cc9544c41ee7ec39ce909d0c63b779b1af0dfd7492a9ebfd9eb1c5050332fbebced7c0614c6568d06d50dd162bdab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c69eaf8a95b3977e42e5f76d67d34a8d

    SHA1

    9b322750841ff1c548ee1ab933fdb3d7d82935f8

    SHA256

    4c8ec2b83d63ab3ff370949c77bd566b5d5a4b47969c48309bf19838250a63b2

    SHA512

    3c233d12c28c68b123110eacc2e9d8204ff0a43f357027595fab9b29bbeb63afd635eba4b84877fc5955c309d280b6e2944f477c98e7f6df61e61cabfd2853dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e44f7d4e16bee808db0409f0bf82722

    SHA1

    7d4586f739d26c5ba353b42469b4b123864ee3da

    SHA256

    bcdd4d0d10062672ac8fd769236fc7c79bbb84c681138f45a931b9794bdeebc3

    SHA512

    9c72d50a7bddd08967b7b55d104337da1e24d025f2cb085416555c58a3d77bc0a0a3d10e12645d110c78495a901a8331d8f1d02399dae95dd0245de6e706c36f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d1686c8e576e57524c373d5ce4942f1

    SHA1

    c28b527c3e635ea6b34a19dcca4a740503894193

    SHA256

    62be356a8797b917ba0807adcccdd68880443461765a8e38583daa7ba3f58bd9

    SHA512

    52b518dd56520e3d91549e09f0bc0cfcd1555bad161641e15aa36e177a39c1f3e1dd499cdd966e82a74efbd65e531a66f12b925ce1803d5a6b129ce90303ef86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cd6d3db1ebca98711d5e391eff0efb8

    SHA1

    8c7dc5fdb959f2cb57833dca8ebc1010f02f612c

    SHA256

    f2c4f0117efabe239d82088069799f7c9011498b253fa1b685a472e81c0c78db

    SHA512

    552ab50c4db0029d6b59a1b9a0b52edbf595c8b7d34ee7bd08f136333b176fee9d8a22d14a3a7ce4b84a1a0de2268d7175c3c4a1a1c09671ca776606cd56349d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    722961d51e260eb08a408ed70f33f4b5

    SHA1

    34a28da4b8cd9a5197f655f7ea5c4d4281a5fbe2

    SHA256

    10dfcc59f6e9a90c1b03ee3a07557f346d7216fdf470119bea5c518719a01743

    SHA512

    355d8a56a2ef18e19116c33fedfad9e3ee623e6285892752ac53c01ed0bd041e127fcfecbd65f540f35457aab03eedade2dd1ec09ecdc8ee56aedfadcfa1471d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abb1e1bb84d0ec4e96da81f6f4638d10

    SHA1

    697577660a0ca958b76834d0d1f90358de81be91

    SHA256

    8c445f7a69cf1cccdd5bcc63123e0b990360811565c88a5e5bd8716e18671d12

    SHA512

    4a7db98a7eaa3163b9e6de5edfbc7c51bb7f1733a4cee156313a7aab30f067ecee16cecf68a3e8e0daae2ce068e859ca58b0d77fc9a052020b4fcee41817c218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4392dc9e76fd2ff61a82d2e86f6e413b

    SHA1

    d694d42d8b3bdbbd980de337ff049d976bdcb0c2

    SHA256

    2589a5ab9eeb7191a43b49067b80780b810995bf458429c9df194b7e32ccbc2d

    SHA512

    89424561101de49088cfe7b9350b9363429795a9dc145e417308bab931e66fb631331012aa6a78be183092fa3f819b6f1b56ca3b152138191548afc371193ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a49d1746d02c08c223e2f2376891250

    SHA1

    ac7afbe9bebdfc72b59565b7179058f44b2b34c3

    SHA256

    c5ce62f746166c997151c2c5587a410f4c64c1198feac08901d0fc2bbaff2b33

    SHA512

    75d01aefd284d80b8830a50395a2615a2ab00b9f08170c949352c94f5860522f914cdc4736d9cb836ab240b400d2c9840eb2a7b73b5d14d08f396f59272da134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af16c210be32b1938411d9eaedf9215f

    SHA1

    d3e3bee476f0473e128fa0698053c47abfa96516

    SHA256

    9de133f483fddc846466011d892ea955ef339ad695bcdcbf6e3d3a2012eec6ea

    SHA512

    fe1a4724d2f0cad5e7cf155d70ad758550b0f2c74d372c9a922a4aa27a459eb4099b20edcfcda45106589b40852ada81070d64ce9e602229afb71c84cddbd6dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d769294d29b2408cc7a2d6d5690ea3

    SHA1

    39d375ae25fa4528bf8775cdec003e6ad079d77c

    SHA256

    157b7de664539aae4ef2e5cb2640512cb8cec40dd9a5982fdf686fe9e6927dcc

    SHA512

    9ecb692532c3901ffe7fba175674666261db56fc03092de27457e0e7f890e35ad0dfb78e173b2f658a4a54fc2a8fe5722b1a92ca49efec00d57ba1e230bccd2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07f14995346698cae7b2907760a1de66

    SHA1

    646d70601fa29ebe30e3c14962338e5407ae0fa8

    SHA256

    39f8983708bcaf32c12f52bb47fed1e124351018ec1f05bbb104a52af8811a74

    SHA512

    4eadd586d8b7d26e50e7d361a0f82776a9045bb3cc81a5ef89754b64a5e6dda1018a12e3c543a63664d4f3f14df208ce5775098b627e31f638eef1c3d4f917a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7603897243836e7d6b799ec59d9ae705

    SHA1

    394ab43cc9494871267a2b517bee86f144419bd0

    SHA256

    a26677a68c640acc7650430322944712670522a00aa9c7562322c49a297b8b09

    SHA512

    2e21d9e636689c0871ce168252f9bab00167cd4c950f0296fa153a7231879c27de29ae76c6730ce77cb660e8d289a012ce08332880341602149ca7e381b5ca39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2eac93e73b47a6b09d136083b038eaf

    SHA1

    017a873cae23134b9d4d3da7cf2402ab4a2272b6

    SHA256

    d12e7a9e23dd48b2bf326d0d74f39f8d804a870fc40b50312d2ef64a69b7654f

    SHA512

    586479bb77ea82b88e194f21b41ad9cce2c3d2fab74f8e91ad25ae9763bd1bf994ab024c65b491e46bd6f9d9d9d59405297c2ad9d892a90904efda257fc0f349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7e112417eaba1bf98688d3bb23a64ff

    SHA1

    63a0498327705c975752e4e48629d9e86d621629

    SHA256

    813b111780eb3198a93aaff4a977f82704daaffabc4869a8b1d162cc4293cc06

    SHA512

    b902eb77ba4af86e79489bd807c355dcbc77c1520fc93af9f6292b1cdc7744f62743c1f7ec43f9bb966fc2e5f5a6ec40a4d2a6a40e9c87cc56540cc4bdb77a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    697ad79a44107394a054603791e4f2ed

    SHA1

    8b6be81c9bcf366505307ab4a2aa7d07d4ae62ce

    SHA256

    2d3aa91d83e1e86f40d9fee2a8bd41ce70004c87ce0d0bf45c216d7e9195030f

    SHA512

    0c1a17ad69d6cc06cdb005f76abd41c8f606ba3f95f5375d7ea8a453ec8b88245fa5490485bb4dabd9d2b32a57372de21762ebd69e8dc0683cfa391fad4a2034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba9673a6ad4242bc2e004973ce43bb27

    SHA1

    412f2b3bed6a252db99722af0b8ab8b6f84d9428

    SHA256

    c891cda00026657ce3ea516cb63283c9567a76161e1a601634ba6a8180b14376

    SHA512

    08a8f5215f578aa60e087e1ce3423831d74805eed00c3d4bc2e971ecca16c4e2ef4ec2aa5b8c319824e6182a872cba141856209f8754d3dcfd72f3ad14c81c68

  • C:\Users\Admin\AppData\Local\Temp\CabA094.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA135.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b