Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 00:39

General

  • Target

    27dbe21b336d41e50a812910025079b7_JaffaCakes118.html

  • Size

    19KB

  • MD5

    27dbe21b336d41e50a812910025079b7

  • SHA1

    231c5ebdaa4735bdfa5afa1d939f94eb1b1f0cae

  • SHA256

    bbb9ef2b81a6883a8e47192de6e371dedfcd6fde72c937ed77d07626ff8f0d6a

  • SHA512

    835930e7464feb8af7231bb5b4fa5f093fc71dd24bd1dec1a2ff1c043aa9d5ed62583df4bb122d7451c2a58e231ef7313c2a7c86257f3d4f10ad0b62fc200046

  • SSDEEP

    384:sIlIcKcnwWzTAhGLp/a7JpmI7Koqerh5PLt4x/g8my5guLZ:wkmGc2gQ5xLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\27dbe21b336d41e50a812910025079b7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0186b58eda880170b53f79c3b78b5f1b

    SHA1

    717cf2967065d8376e0feee3dd373cae77d87774

    SHA256

    96c45e2f37d8a511af6dab62bc18a3fd0230cc56d2f602c0d88ed60607d2c775

    SHA512

    dc0ac6494781fa957a92900fe2b20493825d17728c67d606d9354681581d369ca694a181ac53e485bcc1f0b530162393671ca8a41e3339e2072bac821a891fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d713d907d08e4310f2d6465b975f3478

    SHA1

    187b7e6a8fd19c704e38f379148d11c1dfa586db

    SHA256

    1be304ace18fe4eb0bb5c1ed3887510b1a349c78979df97e5633de9d304646d8

    SHA512

    b846921f238a56415f685ae212cebcb64124521b816012946a5208d27a8a45b2fc6d2c3a38c134b34b91da9afd3a910e6a002c4caf95a4ca299a1bade23ef978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bf6a5828fd6c785dbbde1abcecbf53b

    SHA1

    fa45c01c17707409e8e2162770baff292a92aa17

    SHA256

    d38c15a6b1e84e537b525c1c6f282fbfa41ab26477af2b3ddd144cc3ddd85751

    SHA512

    c0d51507634bd8c12988489647ce0e8b7ad6f193d8eff8b4a710fb765e9f8d83456708fbce3b9e390f1c6889e56cca769585de62cc85876f6b82a1e80247339b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a94ec119fd188f571e1b5df2d03ccfe

    SHA1

    abb71186a22a46f41c6f8796621be968b760ee06

    SHA256

    3b431884ed0128ff83fbe9b5704ce9e82931e5b7233e46cd088c3eb912bc6ba8

    SHA512

    21b24bf2ce82ac83196f50fe9334a90831c50819faeb5813c218c4fb5fb9bc4c50ee4068acfdb14a3ac5b7f22122c1bb94a21a03be564311976899883069f75a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5493c63ee8b0acde2edf23fd15ce57cb

    SHA1

    e969356535817c047c77307d35df15d60817e32b

    SHA256

    cfede72804d639de2c8036666ac2aaf7e8a253d81318e2c398d5b6d595176609

    SHA512

    2457feed47ff729869f252d4993c1a353ad4bb2288dd52bfea93957c438bd9594d2f44bb0de24860a5cd3585671899df2a711affc4ee4ea0767f1909c0148ef9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa602ac43f1915ca2590bb95de86a79c

    SHA1

    dc3978f1d581aa7db788053c664eac29fce78cdb

    SHA256

    155e876c623a102ad14b100f42dd335a80e80fd508a012baef3cc8ac484caf17

    SHA512

    75ade310288b23df543b98f8b1eb2afd871eb96c74d85613affdd4d04c471683c802ab7c7d423463613d5783be7fb6bb689d50b671797e4880d115be74780eb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1d976f0824a178f0f76553eac7a11bb

    SHA1

    e0847d28a417c8b91852afd07a0f4e43a01cf928

    SHA256

    f7ab07e857fe6012c42e596b1c94400007af345ddd699b3b5487cfced0f92d21

    SHA512

    90e464103f27405af9d240f47ef7a939402a201c27001769506c719fb57b0e3c074fdcc10ee853b58f58b40f818fe49f7cde929c03ed7ed861b93a8159b05336

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78a6be43c081ee8910a2279b04249aab

    SHA1

    135aee5f3d0b0581897c3918011df3dd58c2f259

    SHA256

    5ec6a76f7eacc9d25d4d89e26d227b9d6fe6169b19cd48d734985877b8a4cd8a

    SHA512

    1622dd1e357549a35dc9c623283a23f03ef945ad951f24ab98be0a350e9d917613ad504ee6ac81c8c0a9655cc4b1ec9783d5ec2b4bc53f671351b5628c9d6aa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8064b774ce767f2f573cf0b8a4a7bdfc

    SHA1

    04b166c482409161c90a580880ee6c84762e0a4c

    SHA256

    c534e2c643025b38deb0cc5bd381dd66aaf9aadb664deaeea6208ed90a93371c

    SHA512

    389db4a61fca3c24455e227337a57e004e0425469615694245edc56a3f7d922f58469165222ebdfc12a49e390e4fa3951a86b04e5c17c1d0489d6d6e3ea26a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc46f2f8cd00fc5f883239bfea6fc177

    SHA1

    2847c55fcf87ee9dc095e83b270ae1a3d8a59d6b

    SHA256

    6ccb574f22a2118101837e996d915cba081ea0131e144168a5adc8dc629fd1ef

    SHA512

    8808845e629c54df1213c6a7d3ca775e8c07dd14525df57502c68259ff6d8a509c9c92a23268e0a3a0d58ec558b79e3c0043568918cfd004f7d5009bcbcce2f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd8a7f3072895066e8a476d1ee45e3be

    SHA1

    cb910eaddad9025cf2368675a3b8dc8e6a5611e0

    SHA256

    984a589e72f8e59bff93d98ed9459fc7dd9aa330f6fbfd59c4ada92b16d6820b

    SHA512

    ca01198fbb1bbd0c414e9771add565ece6fb4268e29eb3933a016d4962d3dce20905e5196b91e32f97235cd2f0f24e17744eb86cda11b4474de1230f2fb85c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    153d8d6bba99aab893b88dd4d08d670f

    SHA1

    68d49d93715c5013a0a969e0ce385225b8d92ac6

    SHA256

    f624dcdbed4c0a4652951a703a5ff34688e8d5914168d755f6554d128bf7b4c7

    SHA512

    bf2037f1503e491b529569edf37ccc618ea6dd6272eac6b826519582e03379829542421e14bbe844a506fb746954dbdb65aeac31efcf96f2656af7c174939491

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bed9a0b223763fea7be4300676561f97

    SHA1

    cba94fff9b882438aa4897a8840c6e557db7ba11

    SHA256

    f52bdec590a1af38cdf150e24fed6f5b2e70c4c6c8a895bbf112eaa780723e14

    SHA512

    bc63912f02e307e6ed79466adbd9a6017106838a58fdcc841ee048a83d2ba3b3f334d44381565d1cc1419c0b4a6fd07b3de069f29a795981b6c1f01d991eec84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14d11584bc3cb52ea76bace1e7714fe2

    SHA1

    56e8adb783a97fa07d1b801b5efb36eb31f5d30c

    SHA256

    2d288ad90f722319faf2fb74cf4da4a9b5f1f9189bd9418fecd559e6ec1bbe37

    SHA512

    c43cfaebe0f9201899eea56aeecbc1be21c2490fbb28000fb5f62e734a74e2c9b58be7117777ed0c0b688b78342302ed00cd41c894676761150f6b223ed5e7f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    690ea45df6af4669da1cfc61cf66c4dd

    SHA1

    9aa813e4f04dae31e28e380953650e025192b269

    SHA256

    5e69cfd85c4e63a653b7be5f0706adddb91c863afde17383bb71ce320aedd3e9

    SHA512

    a3351f59e76cdb86a9c27b3346592c64b168d505f9eca0d413f8b482b52c08328f7ae72d6905a6e2d6fab9e7c0bd0c5dc70c998398796e92c5ad911755bab775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b719f7e1e5bbe037d9bccc703cba7cfb

    SHA1

    a48f3e20bb1da7551092a2122303edc155f9d578

    SHA256

    b852d42e0334c15d62cee8aed6bbad146ceffd21374cc17459ab002f465317b3

    SHA512

    ecb59d53e3ace9ae46d419658db68e908616bd76aaec182683dbc6fc05e4cb4e86460e195dc9efa1c9662084c1dbd67f5858e238c3e22afa81ca865de66a523b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3eb0ceebd48112cfc482c4bd93cd14be

    SHA1

    47f4713ba68e31dea707c95b7bae803204445d6e

    SHA256

    2f717db38a8388d9acc729790c3a546b89347d007dd308dac78322787c95b9f5

    SHA512

    f54f2f0e6b7333c473140de07c56bef8a91c36e682f42081f4e33dd28b64167732145aabb83395934a8ad37b041f429fae4a03b97df253c731e6bfdddfb9ec16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8878c00bbe34a7f3463a0361cad8037

    SHA1

    6adb75b0bbaf55663ddc3a255088a405af71e0c7

    SHA256

    ea81a84a7f4ba321b4bd260b8e0d7405cafde1fae7477615ccc6d90a94a944a0

    SHA512

    2ecc3704a901abb535cc3d4adcfea29e54887925f88b9047331f1577edc1669f3f9b69e710820a4af42f077314105bddaca6343528fa72534c8b13dd0cf7e152

  • C:\Users\Admin\AppData\Local\Temp\Cab77C0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7832.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b