Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 22:47

General

  • Target

    269e502dc92ed09d80a0e8c201b422f3_JaffaCakes118.html

  • Size

    139KB

  • MD5

    269e502dc92ed09d80a0e8c201b422f3

  • SHA1

    32bed9db71637519b44b2f31b5214d8b0c9552b8

  • SHA256

    bb5e6356e4972643420ac038dab3855fef4a45ce1b3e31118acb93b5bbf37cd5

  • SHA512

    eeb2475bd28f35961d15f47f5be377d710f483176e7d5391057b083259959b8c800b152b5aad37116a10518d81831e78b91a01ee2cc2fee831d06cb1fe0015fa

  • SSDEEP

    1536:SSNlsdy3P6wfydTGlisYyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:SSj8sYyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\269e502dc92ed09d80a0e8c201b422f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2684
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2684 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c4e643d55a3e5036225a48c51e93524

    SHA1

    6f30c1ef1c9303fc1cbe67144e524697ce4984f2

    SHA256

    87928d0aebb2c5643484a5458781635ebdf292d3125b30d72d02b47bd6ee1cda

    SHA512

    af839ad6856d3d37de6d18b92989bb606f48fe6cba121e3ac46b6448dc30aee91c98b63b7c0d1ea7303d50cd587aefe9dbb84d2b028678b2d24e48316e66f464

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46f3b03f8b2d0830cad6113272996347

    SHA1

    8812a29fbc8ba6874d62c2ac222b9f33950d04c7

    SHA256

    11dc052e8f1df9a9e8b33188475b8c7163d34e0cac65959353bfc23798d59623

    SHA512

    e4beaedaeec141330697a95073a03002e54becd7dad6b6281b0d9f2701b5cfb0622639415a2275ce2d580a5c0e41b2ef9480c715a7f6fd3d795a6e6770e78cf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    755caf112198706d95e728cc1f2dc54f

    SHA1

    17470547c1b4106c6529efa0d5d5740f564a2d8f

    SHA256

    af033917c9ffa5b77de2e2fbb058f376ef184bb14b22e51bbd78cc67621bef97

    SHA512

    1990af47cf8fa61a9665ccf7dd4b4439712df7886a1eefab5a9c70a92c23ef4121b4b246c534eb31fe82723568b9170f04e3c8f725fe1c0e3abadd1dc6aebf27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76ad77e04d5831bfae341f767110b9d1

    SHA1

    85db3ecd542e6c80c1e17a1c393c6fd5aa107062

    SHA256

    4b7790d686841b5617bd5e4e66454f2e28ee11c79112e7bbedac1c8d84d3134b

    SHA512

    a521b5d40acacb040e02920e11008e032cdda0d01bf168c8dcb6e3a15241681750808bf22b9f9b77cfd1a7e842d044b46ed6e650f614a677953815dd938b81bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b365fd55ad55e88e0723b6e306c76ab3

    SHA1

    acccf3643d440ebe2cb78b394f5e91b7d1914fc5

    SHA256

    9b8978320e6fb6d07b9c234c9d67131a3b6d1f7ee59590180778f85fdb17b6d8

    SHA512

    d0b0d0e38c4bb7885061db2c354b8431ba5a7ce440da37092144235d4914ec9ba7294bb3281dff3e2f9cbfe8cc9e1a47a50c85259c5b7b6768adcd3cd75db9c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdca69192ce90001d2486a0c75ee5ef6

    SHA1

    7df2cbd7b72692c819009c9355ad84a897ebd261

    SHA256

    ff0915bdc43976dce4a9b9c5f18d836e0ff7127d6f6db8a8af9af8dfde63984b

    SHA512

    cc84268883a609cfecbc1f690c8290a8ead550dedcf8a7802ddd9cbe9eaf556fc687cc491ed44f93e26e3d570fc9587b55868c730aabd0593f00cdc1fa8e87d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcb209dbb1138a147e4d5831d0f14d01

    SHA1

    9c7856274db17a0bafa94445f02ce227a8867acd

    SHA256

    7430523576dc08fd1210967a48d64e90d02bb086b1cb4b454ec8639ea81138b9

    SHA512

    4b7ab6f4da4a6383c6488eee407bf3f3b317b06e6b599d5e77678273d9b4efe49382210cd7806ed602ddadb8b5316ebe94a806c28c9b0d9b9c5a3ff420aa1b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4b00a5db9a9df4da2338746b3c0faaf

    SHA1

    ee8538964b5e6d5c9e2aa76042333b01e12d81d0

    SHA256

    f6f449b2970ce0ebdee7050950ac5be4c5aaa2fc894b6c717774b9bb4c8173fe

    SHA512

    21d258c36fd6a9fc5b37fd7966f716a1e2832d3c13521181a9104b66cbfd774579c88d31d30a8867c8d23a5440cb8697a6609a806c3a0c1b8f9f518f367b2919

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e9eea87ed9ac3996317b3f2b68ca311

    SHA1

    9b0c58ef105a21f19a6a146b835412ac4d3013dc

    SHA256

    5fe818816866dc223064bdda367ec9c9f73fcc6ca737bb6c8301f721b6802886

    SHA512

    061f384a1d3b8a7bf557387636e49f07428646f26697d144ce9df5f0e4f7f9176164e8dcb25ab647f8a1d519593e8c8534d9bbea7f2cc4c07f40aff80f359ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3605b328088dd6cd251eec94cc70948d

    SHA1

    0d93a776c6c00e6652655ed4c235e890873738c6

    SHA256

    7e27ccef50515b9ccd299e28c661769ada1d0eb9ebbc334139b1584d723eed5d

    SHA512

    b13370b598d596978381a620a5963b5fb8c61962eaebe687422153ce0e9a0bf25f974ef59f4bff350c66c370896b8408310a67d0e53084dc0bc41d981f30a0e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25964b1d2447519e4e0ae8ccf276b674

    SHA1

    6c995a70cb8e6e872e5029255ddea0c9d1329709

    SHA256

    5b2169ad5b4669fb5225a4c00adfbd257172b72e04c3bfd478bafbe9d9fdd15b

    SHA512

    eb66b4a90a79bcd14ac3386900bf3b535a605b416f5e5d09393c42adcdb48cfa380d6176eab36c2411fdea31f5bbca05f26e4988fb5b9140cf7c56674784991b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b240500ab19e76028d6ad6b05e2782dc

    SHA1

    7174376d3c138cd7a68d33dc1c837005f2b3cc1f

    SHA256

    f4dbec3e2f6687e8be6c7c051576ece9f7dc4a0a998c3dbb0eecc6ffc026ee3c

    SHA512

    c75693dfb3aee8ea77dab575d8c7939079496a9623a0422d91326de24c86fc2fe9e6e7c4da38d1224d7c23ed0fdc3d6a010f746121995498a85a19f348e75d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb6a3e1204036ebc6c4e7e194a042a38

    SHA1

    445b717cc7f0f9d26b5bfd18196d6e46584245eb

    SHA256

    2c2ea7abfab97cd9fe68fb6ef086b3fa6089939e03a7dbbc0646e4930ce1c98e

    SHA512

    003122269129d1302627ab1fdb61b7fbbd1a96221eb6fc45f52126e02e9a3297a47e57b59c8de8f4635fd5befe9e66b085cf3f7b59c30ace34d4da5448498e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    472c43c8355fe511e8fff4e62ccccf2d

    SHA1

    113c12c5185d0980ae700c086e36b6a145aabb49

    SHA256

    0cfac258c961f5891604253a1eb63f78052a51aef38e778f4ae4525a2a4a6649

    SHA512

    88eadc3da89c60547124f342447f7df77bd1e01479a477bb4fcf19b897cdbfc2876def99156ba4bd269b965e85709e9a4994328e98f284dd204f2dbf7aadf075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2e8d02743f7f0f14892e1397c2accd3

    SHA1

    5e5ff3c064e78aedd7e0ff8d0f72981acacdd831

    SHA256

    720bc6f40b9b335c48740afc4d9de3cd03b9b785e5f0e94f208033d6baaad8e6

    SHA512

    f715b107bb118af7ca048cff01f551655bdd952a3bad170ef9b98261fb37acd0a783e626d356cb5264a3e5f85a55466fa10202b1ac01eed32e4440f0b53c8ffb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e48f53d06244b999f22d6e40699b9538

    SHA1

    38fbecda94fb30e28232a2161f88a0b00335c09d

    SHA256

    ed9a9668e0d6783ae42b67051dc6721dc8ea81e727c9f95077ef2532a00b98a4

    SHA512

    e47794ba30324fb45615604cbad2bc625cf680bed2c6d715bf7352b9805bfb04c4bd2cddd71366be3544b6084545974b79b89e570753989665d62a17ad3f81ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47a144ab10d7eff33180bbdb9472bef3

    SHA1

    8c5530ebff5df7da1577286f084aea456488c6e8

    SHA256

    d390e5575be2bb3e5e9fddcf9d4694e79005785d674f7db446afe7d0171aad05

    SHA512

    b4623011abc22c01fb80486136dfd60df0dd64e147bd8026722c45759ac0a88da3e9df8e46ab429f243a26df2b23ae8bf296bb2c7a6f97b6d382d33a1c9c6f97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5308f8168db842346847af05d2b69b15

    SHA1

    242b5ab20ce04652ec507db78b031fc144c27d99

    SHA256

    39a4f09ed9d81c4425c8d9f1798030287331d3d40ab16ff2e8f73b0b255052e6

    SHA512

    5afedd420ec4ab051c015c0a58827afec7ad7c7f439e4c6cad7e79c9e5c63279a272ffb9e44844307f7c603c7320999b204d5b97691e05377eaf0da0d077dbef

  • C:\Users\Admin\AppData\Local\Temp\Cab7419.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7489.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b