Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2024, 07:54

General

  • Target

    16d16c7274dce9a8724737fe2ee768e6_JaffaCakes118.html

  • Size

    11KB

  • MD5

    16d16c7274dce9a8724737fe2ee768e6

  • SHA1

    2f46ae394eaa6ad0a4bb37c296ba6c6d13a32c01

  • SHA256

    b1eb66a68be0679fbb9cadd5e8f060aef35fc7462c299f99d43d789b3de39255

  • SHA512

    d455c358280a1544c4b1de2726adbb999e63e6fdde4ca78cf0e93c5ce4e25fd144cefd1dad56f7eee7a0650618b5a59c2e55a5288ee34e7ec339b6de1abc9a6b

  • SSDEEP

    192:6XTPT7ErxtRL+bUKc7FgkuRCIGZup1fTiPRUZ7ALNpTpSpgNp2RpNEpSp+5pypSN:O6Ec7OkuREAMUaxR0EE8kUE8UEksEUkc

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\16d16c7274dce9a8724737fe2ee768e6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    492054c366b454fc79961c8ba6a68411

    SHA1

    51e0a5e455c970cffb4a572c32dfa7d187ad31f3

    SHA256

    441a1c1e63b9110a97cf81693ef4b3ace480c41a53dc453704da89a37a6dabf1

    SHA512

    a19b702d104d40ed104286152017c7165f1ae438fbaa50b3b8a0d30e2fc8083b6c2c148e0f6eb807ada289b2d48803b92189bd1dd177ee911a17fef04967125a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb3a5377aab1e3712b6a40a8b6791e0

    SHA1

    5561ced81ffbc5eec6ed4b89f63076af54440ebb

    SHA256

    0b9336e6bd659cdaf66d5f28b5291d5135c5fd8de1a409e3acf6d6c496101326

    SHA512

    d7f9dd304209470bd1c8933555af42b51fe760de01b43fb2e9e29eb4f9c7f3f18e6563d5d60f093b68bc389edf699c435c372f32884e30239b3481ab48bdf7be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec2dec10c6431dd5e61ca559904fe1dc

    SHA1

    9b52efae08b65dbe706e4064ab39ff5a72c677f4

    SHA256

    5e56255c095010e611a0f54473f7440f2b77f37243ef10deb249f56694122f9d

    SHA512

    d7c34ace113f8212057fc1b4656dbf055b8e92379172f2dee86239ae7cea975b85450996844913673d2b9ecf6ca8f4059f62708c6a0b83e805143084c1a31b50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f9480c91faf663b51bf4d40c6532a08

    SHA1

    87ba7a5dc87fe1923a5bf3899f3adbd4363a975b

    SHA256

    1d77f081a05a9379ef66c68deda92f8f3a26fe6535b96bc5513e37a663b05720

    SHA512

    0ab36ad27b73da16877c9b40c2189225bb7d3a003e85d8e85204b91966ad7f27db1538ee6f5b7194e892e2c80efadefc442f23c59c87f7ba7c08914ec9129330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4038739a6dfd92d343be698fc426ba6d

    SHA1

    141717c9c66730cbbac8b294ccadfc766afed5fe

    SHA256

    73d2d450f4d53395d5bcac014cdf619338f856ce85dcdb271b71db98a89f0c89

    SHA512

    df5650038babe81416b4998d3299fd02116302034bbbbf7cfafa90f8d5d53dd94d5af0687ac041578f177e32fa7008c5ca613db30b58842bb20cd1a285072924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    290e77e9d2fa8b323b66829bf3756631

    SHA1

    bf9edf328117cc2eea6f9cf0835578962ec7f0ea

    SHA256

    d709f6d0ff6c9cc113cb132b76b922e805b05cc6d83e4337665f38c12939b850

    SHA512

    04939d46b2ec281f0bb12494e9ffec1f357f07367426d2eb1968f0c7a370b41571235c0409a8c78ebe6022f1a0f8aadca0e813b8082f380b7d6adc3cf8552c00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1f865b6458a323e5b81431d9d98d5c4

    SHA1

    e76b61d33ff0240c45c637bb3e7c1054db58c470

    SHA256

    ba3316ec6cd55e8dbe7568158996a4cb7485f651f7b945e292175f32ca85076a

    SHA512

    10977215dabd524703547b0ff6b1a74d199345bcb0726a6b55a4baf8eacce84ca82b5b86fb86bf3d34ad1e44dd794d8a4374f4af8473355d55364fa1d602f666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc17f795492e7229de8f7867a1b66164

    SHA1

    4abe6ab9ca7fdc31ff7524e0b427804f6165deb1

    SHA256

    75e258c49b28934822b469791317ea5fc4769283bdbcd3d1b2d350b28c50fe65

    SHA512

    930d8925281805712a30f40f58ee8b6f2872c997e06049343650661b1143ec429acb63eeeb03fd07e4670c370ac2d31239f6ed1356a4b8fc86f2afd26a2f5e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c00555a0182bcde50d66327ac151789a

    SHA1

    fa486e788e73c39e7560ca432d5e508309d92201

    SHA256

    8f5ff92861b110bb992686699edcc4821178b2518c11c0c96fedf8fe181899ae

    SHA512

    98a8ac7c7c1b8e571ceb7048cd67b868283f7585f61a249b69c8b8152ccb242f693f9134ee207937f5c16fd86b1abc8ad23ba2a217e19aeb2be8de712233c099

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b53ded4e2df0621f363e05f4b9184c0

    SHA1

    3cb80d300e256830634d73fb63a19e0cd612f167

    SHA256

    7c3bc334b31ed5026301130f8ecd9a71c815d7aa1953e53faf19ee9c4e1fecc7

    SHA512

    ae978d9a93000ad03526e90ce6489887f143abd33398038fd50f6e67533c9fdeda08b03b49569a0f031f371df517798b1ce2af887efe66f6aced4b3089356c0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b9c50da702a2010d595a3d68fbc023e

    SHA1

    5c175beb8b0c0ba85f0f8aa2316ab725e51f8d4c

    SHA256

    a63a0bcf08f884fb169a1d21d0e7ec44046eeb2b4963d0256addc7848713c587

    SHA512

    e019668029427723fe734a63917060364a01163beed59e0fb01436b4d8562a2c5a4dc3abb4192009af059995fae398a5bdd6addf41f5bf2f2c25d155333764ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d910aa069a65e1f948829d2296419d5e

    SHA1

    d7893a13b034859b800d6cb135c2424d23e121be

    SHA256

    78931544064a6007a0a78bd3c639a8705cff79ebdfff7eec2dc51458908c66e9

    SHA512

    ebdd1925938db773184c28285dcf3aa8baf9e3c017969f9e7cc8df25e5fc194db2850e36312bf796982d3abe308dda6de3b91099f375790c502c1912ac5f4a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9d3caba3cb72bb4a5c3ebc0b7586a0b

    SHA1

    0f5426db42ae8c5ca1bca461c5bb3fc268090492

    SHA256

    9d086eba9cff2673636b8cd2b886a4fc18348049b762f2bec32c81eae8c14058

    SHA512

    cbed2e70ce45d10702f9b1268b7ab7a2aab1c5e5c1fe27601ed062e7e22d30bd3be07eaaf5a15be792d9ab18c3b9041f1d004f62204f02ed85eb6389f46fabaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca9d354e52fb88d41c5b70d7ef2b92be

    SHA1

    91a02b1147fab448e2a1d34cd8448fe2ef808743

    SHA256

    8014b48d3a7ad57ee328c432a58c96809b62a035830fe8de9589f032e93c940d

    SHA512

    1786bf8a82df1aae325ee5b6693c6250f9ce2477887b074891d674655bc02169e3885be278f2720173b32f2a573fc6dc4c45e8d405bfa600e8089ba7a08f0d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    841f33477ce20351822ba6fe4515cea2

    SHA1

    4912fff243f8c1c29232b6b64927c84e00c9e185

    SHA256

    27989f5aa3bb65fd8bfa7993abe55f08957c881782b50198a74a3d47d74929dd

    SHA512

    b164b34fdef8eeb2e5a4869c5737b2d1072111f0079c52854922cba1f8b0421977378394ec0f58dd00f0f6cdc4cf24acb1c655603c687cf4f3fcb84c416ee5de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    601b56ce6a9c45db71023f32dc1fffbc

    SHA1

    fd932214ca6cec41b5d65bbd5541dacb0a2c2fac

    SHA256

    776ff5e1f68b3d578d94b07216a327d392740c63dded8ae188cec2d029edfda8

    SHA512

    e7c775a7f8c3fe6c4aa435c83eddd1935719cefcaeffc51d9c10a0655a2b94b7359ee6ec47d82d752a468f62d0d23693dbe412bdd2cad00253cbcd52de8f9e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    552f37525b43b26de7ac248c9ea048ab

    SHA1

    049b2fcb549452ba717edc7c0de316ab5b93cedc

    SHA256

    c913f5bd3af7fa78b918ce797b1b51e6efe81a5f6c289eddaf18c5a06ddee118

    SHA512

    c78497813fe78b7be520668964e21096dee111fca8f28595b804df45bb4a5c84becf2aad898cd922e7aaa0180b02aeee5a36556890317aecce99cb9ae2e9e520

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f77497f1a6f4cd307c169b00fc73a01e

    SHA1

    ddd0e0eb2ef05df22a63590e772cbf3bde2e9958

    SHA256

    0cb9b91fdabee1b16e3be8a651600caa368c01b83eb94c936378232c89968c97

    SHA512

    87724b1cc2384dad9541c8d333651b80836c45f8c1cc4e70ab080d86280d46825cc67488a930ef58e881a114b50abc50371d5a4fe3e9216b655383c923b5a978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19e4fb6134eae614f1e8433f8368cee3

    SHA1

    b61ca1465f1e88a1c20386a9fbd74959ac733454

    SHA256

    4afb8efbede41464b89841772a859abc66b2c439a809d5b128fe07db289bcd05

    SHA512

    a4fe6d09b8ede47e71a9cbbabb8d2267ee1c58234be6d8e48694cb9498efdf24ca7d32d817561222679865aee6ad0f3e55cbd679a5111503bb527d8eeb9ceda7

  • C:\Users\Admin\AppData\Local\Temp\Cab5E78.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5F07.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b