Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 07:44

General

  • Target

    127104cfff9644be820b10ea77ea3b4b_JaffaCakes118.html

  • Size

    3KB

  • MD5

    127104cfff9644be820b10ea77ea3b4b

  • SHA1

    ec56e9d0782484474f4bf4cda3bb0e4ea29dce29

  • SHA256

    a3af42c523ba48e8e9d68356c378224e348368e4ce5b3bbd6be18a713d7a5a7b

  • SHA512

    325df5c934e917acfecca06d104402ce96287bc89d7dd9f319bbd29aa51c4e10c689b0cbf81ae2601fc25082a0113139f9f386d4a63cdc3a2400e4de3adca77a

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\127104cfff9644be820b10ea77ea3b4b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2516 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4ee0b6231594da494165b11d391b089e

    SHA1

    ebff228da1e4ea7630c95943f3ef2d2fb9ae6315

    SHA256

    78b707c0eff31881a2bf6bb0f123db4def8d611a0be4ef8ceec399456ea397b8

    SHA512

    53f2a7142975b672886cd077bad1216c9a5f076f1d503908ee725733004a8513e8e11ef73a0c0bbbf3130731fdb4a18fe78eb0200b7243a598b4a6fa6318d311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b44cddf86edc37517bb86b080bfb24f7

    SHA1

    d3f539591456f92464f564d335aac0f773f9432b

    SHA256

    0d90911b05cc2df4fa4c6b29377f06426e04d023cea75d869aaf6d1e387e787a

    SHA512

    05dec8111b246d87286b3c2d5529b03a6543a1e4cf9e59814c6bb351663982707fc18c555a10400399928a726a828c15e591c2825e495634144658de3636b182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aafb44d2deab3003767ada849c0cac2

    SHA1

    c38c5445f3c292ba6305f59a52252dc38b0dddc7

    SHA256

    783716dcdc5c094a3db67116c463377c8114876b0062510a3e49c98fa90a0b45

    SHA512

    50e932c89b57cc33193be071c9d9861f04cc329722fa8fb5927f2f6f0a83f23c81ad32049dc4511c72c17a0672d36a7d485bcb8c48714ea128e6b2c02213ff30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a36731e5b3e9a6357a6c00ae5ec556ef

    SHA1

    03877f964ead4752d0749b866d1787728b7f3bb4

    SHA256

    f9ca6682d78508bb46c66e7d6a7a3710489be8f153187b70b23117c836841c98

    SHA512

    219b8c147ec1fe20c7c26a78f5a81e5f5728b45a07c0213dcfe64ceb4170e1280536425ca2c5d6f5bb54830481c877906cf6a9622155e98629689412ed6b1069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c501147ac72f092071239b148512383e

    SHA1

    853949099d2db4d4613ae74bed8f548f9519a399

    SHA256

    9d80ce8d2c465feb7cec3651c3d4a6c06272beb3e9c8cb27ccf496f8b3f3334b

    SHA512

    e92561e95d25b73fbf5a09f52318cb4bc4d1922507c794951e6a3df9910872e2be0944b4436a16ed07dae395fed15ba04d6c74bc5ad1fcbf89d37abded652140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e644bc5dd8696f3c36207ebea85123e2

    SHA1

    d5307050a255cde63b02f458f8e439b07d4de962

    SHA256

    47b4d457d7c981cae5c806668ecbd984ec39b319f1ababbb76b3f58fe4d24ba1

    SHA512

    f71984019c00fcfa892941d5c84c0e95e4609b8c9d94318e161a629e6390b10d9dc0db6974f97ad48c2ca292968c8e6f176a2d6844c6a075bce36750034fda4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb18c80baf75b464935f3ff4b73a993d

    SHA1

    1f197b713b0b9206a9ebafeca4b764d369341c8d

    SHA256

    a35f5a24c0e11f1e3f4af22caa159b2e689dd654df8d11b5bf37c980baabac14

    SHA512

    f582a2bc89b9de793cf22c1a137377cd3aad2e87c3f1eca11f02429636a6bc59bf90a90ee7ed5276aa4b531d29617ab654151ff060cb0fa759e6dada2039332a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83386a022c7c12f7e7ad426828b7acd

    SHA1

    56245da5dfde73cbce46db6009f852f73fb8bfbc

    SHA256

    631248e7219d3ee6ab7b46ae46f02c10dbaa19a08d9a1ea9a2aced0de7c3124b

    SHA512

    15b1b2de35fbd256949ab712340d7b2555d48c9f54a5b953450563cb21af69521f00e4b81979c94afbdf0fc3e15a6ff5edc55f71ad6512d517a4c4597a72a003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    824d4068dc318faee82de9d2456d7536

    SHA1

    1d43f1e5a072f52409a5ed7b0f94632cc68562cb

    SHA256

    762d4805c52254b4e0527bfa3800cd812cd1b1f760169e0693e1cb6d788e3c58

    SHA512

    d982ba9db5903d551c0639a84d4ca6c66df8102d21fdeee2b1d18837c0b53573d38cc0bc49b0b50dfc3c5b035e02c1fb4691eb1ab4271854ee234001ddb038e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27fa0f1887d78357ae2518cc1b23c3dc

    SHA1

    041e8a568868781f56ad5e6eefd05c5a74a004a6

    SHA256

    a5b68b928414f5fab90e629f5cbaf6332f158c1fb2ee73a30d6a38150601ad54

    SHA512

    c8a74ca7729ffb3c27314d269b0a1dfd14c86faff0b954a7070068445ea4d580d72b8ed9dece8d52059030daef34a85b10929e4189db6b1827e90cfb088b1b96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a547caa3eba579001b029b120735a1c8

    SHA1

    fd58c7fbed62cef7216a84fc52cb9a637c4e1344

    SHA256

    a0c6fd06392a3ec3378e68e19817da69a1bb06eb558c0e53d3ae89b3c5b3517f

    SHA512

    75062976c72d9e03d203fa027fd047d37e3293e075981ab70f929a0a92637ef3163dea6a1dd0aba63a1cfe67e9d38566ec3d77d5e0e9d4f6cba151450a2daa17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb578f25b169a15b4f4dc7373dcc0e5e

    SHA1

    716b7bffbc40baf3a5e54f997de2d29334f2cca5

    SHA256

    c64e824f0cef7fd45dd069592404632a2d221372d028503a09a94f153535031d

    SHA512

    48cf758de61e9d836c896d7de3b050d210c614ea701ab65f43ce0cc9e5e10cb4f4a25ba65be417d01cf9845c89a5850277dbf12dc089dfe617cf8c9d5075035b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a93db6c5660258e258a47b9937e6330

    SHA1

    c2c3d58adb06bce7c7fb7d7142521f82f55cf099

    SHA256

    5e6c46ebbd115e42889960bc6e06df737fd20d5f1cf30f14858d38c5b7e5ab00

    SHA512

    df28d33206f5fb3bfc452a8662dc4eccbc34bfa412d4afae9a11651b7c00e23e0aaa3dadd4c49fb66516213f5e4d232d93e0b64a0054326637bc5e8fb5b7e873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    599e6b075c81ecfce13c821d323d6b61

    SHA1

    7ceaa987a3a340fe98cc6a782467496f684adc8e

    SHA256

    7249ecd2593c5079d2bbfe753a98b683dbd5c0cefb77143c5823b2b90d8409c4

    SHA512

    df978003fa18d2d3155a03979887643a0abdba7ace66f06ff3bcb0787279f8ef7b82997f6bfba0600c978ba5641ad978544ac4c6326976ed22b3f2d13e3a85b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a52c13de9ec5081f639353c13c988f45

    SHA1

    2d51d076cac37522c0bf0b55bf390f4863d4dab4

    SHA256

    da6762b3019ec13e9db03a74e468a322c47599923641c9faa094587635130f6f

    SHA512

    065a8a95d8092b6f5fef03293f8b4227aff5b62c1e448f7b47954e575f33bb9cebd60a425aea9292bb69bccbac01055d0b914b76a7c717cb3abacc00e6579386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c797ca53809169de5debf7523bbc7be3

    SHA1

    81029223e242a64461515cfb5bda3093fbcca30a

    SHA256

    ce05b73570a56f9b5ba0d73c7b9c6fdcc4965954c8ee67c5c5a876b31f258d42

    SHA512

    1f1624197c992540e6101529741e5a7ffab201a9ba9b3b635970d87832b7b9f90985816cada1c36e676efa5db15120b477fa3918fe08dd8e4796836188bff4f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fe43a733b7749eb4cb0bc11898ca608

    SHA1

    9012226ba343efa1a3bcd1d04d81d167a6503326

    SHA256

    be997cb81e6c6cb4c65abf7139e477ac65c9fd46bca0725ee16e280df739f938

    SHA512

    3933ed9e6134b581dfb600a9045959e75edfe0ebe47ab3f22ff13eb89b1bc7a8e41384f98673fb97e944dfe714f8b107aaabd0a79e2e61449eaab45a279c6c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ffc3bf992a375204dc4fcb84a43b22e

    SHA1

    82acb15b032d4331bd3e5e20db41da75896eb87d

    SHA256

    7c19fc85595f8ad3320bdd9bcf74757f0ef3721e6d6886937723bec6c48d234b

    SHA512

    148442d43a942918d45a817804befa136cd11cafd2cccc0c1b1755e77b6e67db91d1a04ef07cb6b8c6e0b4b1d0d4b54874ca720a093d2f522c038ea673812bb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8af2123b0d713254476781c35d366eba

    SHA1

    b10bea7a3fbae4cccd7e70085413e3596bd651e0

    SHA256

    94e5e52c3a6bd7adfa7a8759600ec5634b0a10a666b348868f85af506ab99f24

    SHA512

    9337caeb58a2c3183daa1cbb1704d45cf2a442ba140824bd835409081080f77983c0f3b2ecce556857e80fc3c0d679149ce8f71eff20d1beec09a51c3b875bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7da382ccc914faa9f7ed405e8cc47d56

    SHA1

    df540f16af3e974d65ad0a311abd4821305d3371

    SHA256

    54c172dd3507454f67bb5b996bfb13538be9bf9f7a16e69845d24323afe31615

    SHA512

    372b0b3dc09253baa3c3af739124d8a5f5f9392844a3b568d975692309ac6a28dbe4dc3f87f21c21ef302ea2b675dea8a642019e9fc362b46974587a6dba9749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    0567ba6ccbdbf0764a926e1ebd8242b2

    SHA1

    a7fb305b2489d09dcf7a1f5d1608782aee795563

    SHA256

    53dc69acb734ea2b2af58f9ee48f21b386b2783780c532e938ff2b28fbc5b31d

    SHA512

    16e83e78e24373d06df562e3a1ff9380752a7f9ad4f3242052d7073aa4c164e16b351f0f8ff4ec70465a2b6ef441c8efe5dbc32a7ff5a1efb36766c4a9ab9d67

  • C:\Users\Admin\AppData\Local\Temp\CabD403.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD405.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b