Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 03:13

General

  • Target

    29ce45e97190593b2867db6050abc9b2_JaffaCakes118.html

  • Size

    214KB

  • MD5

    29ce45e97190593b2867db6050abc9b2

  • SHA1

    4bc4d4be09805aa9383b0258f2be3b4f96cb21b6

  • SHA256

    0658f22c051db13834ac8963ad34440c00747a941ce5f04da9c6eed39e8f715b

  • SHA512

    f13e2c86f34dab2ea4d1ed19957d3302d843fee488835c68729e5c3f0839788e6fa5b82badd24c1f9b5aa3077dc29ecc2333a35fe5919314cb362740be1b87cc

  • SSDEEP

    3072:drhB9CyHxX7Be7iAvtLPbAwuBNKifXTJ5:hz9VxLY7iAVLTBQJl5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29ce45e97190593b2867db6050abc9b2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2708 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b0cadff1f43fbc0f612ad1889df6c58

    SHA1

    4966f649b4ad3e275716d3a560f1a7e0dd92c55f

    SHA256

    108335b5372e062ee5cdaf554574048d1c21ba821987bc9010bc978604e2deec

    SHA512

    5535aad64236123dd587995b5666cd9bdc758bdff2e6d73cad5a3703de4cb46ad31d1ffe65327bd7981ad39a185666e00c1a492a4f4a04636a0ce79cb9bb3fa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a870356a2ee24fd4f19c7dd3136d1ea1

    SHA1

    3f22e66cf15245ce5a4b27ccda059ac081fc134d

    SHA256

    1882cb6047b7b1885a3fce81ba54aeae68647ac9e1f941d8e417d53e601545dd

    SHA512

    a6717d9e88a7a45a02e42b40307d166eff7db51c3165a4bbfc510d16c27fbf61a013819db95621c6fe5da1ec23c83a08be64409525709129d44859e2a88ad7e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d4860b203b7d73f0d0bd84d9ff45a23

    SHA1

    25b0cc6388ed49095675b415aedfc6b7c8204dd6

    SHA256

    4580a4cf2b188ecba55fcab59df8d29beb3bd82c04907225f6f22f895f2f98c0

    SHA512

    7ed76be8b5e56c0396aea88efa2ad901352b577542b96f624df20c459de972d1cb1dcc3a2c9ebf546a5ecba34fedb423029716c4ff9b20968ff378651fc30ff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eace24bd72848b4bba044ddd9f4c99ba

    SHA1

    4d083289506dbaefac979a6046f705da682b5b07

    SHA256

    5b5ef0f819e2f373de146fa73b7de8d2aaa2af9324c75b629cb8df8309d44663

    SHA512

    70855187b109c2829557b356a7cd74c8e152c0fa424865f307baaba0c94900a87394d14c846bb14693a25b6f3c1239574bcaa1fd32e34f5f94c3d7eebc5c1aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa11469354fc462ac088e7a57a16897b

    SHA1

    28ada4eeccc61f2d1a4ad9407887312933f32c5f

    SHA256

    b6ce411913ce85294c2d435c7d41da1964f8068478cb44995f766c2a57f953c0

    SHA512

    eda79fd7c3bd2529895810a3be834773fbb374fc5ebd2e35eb0ae4b5e2aad809199ca04e35a90496f619d783e2b628d82b7a24e83faf7dbf5497df0178e2de3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97f7f0f036f01bcc641b3992d44f6640

    SHA1

    b4d0f4a0c0fda4cd3ba6f83098bf2a36419de1bf

    SHA256

    bb97415fffbaea5da87beb76ffbe564d93ad4e49a41f6b60f10a6f8842bd9ac0

    SHA512

    bb8bd1c8f4f318164ef2c26cae6d6a2756a7cd2edea37ecce3a152b89bfc7b64c487ec31a9424cd162ad9c053a5b96b48c156d3dd80e6ee69c9bf70e8031422b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2892d2171421b7583a071833ede0922b

    SHA1

    689960d4a2f84393225835b55db556ddda3a7fd5

    SHA256

    abb9fc2a1ae2ab3ac12e9179dbdef67a7f890c027de28200298c0f27ae25fafa

    SHA512

    51b84d07e8950c464364f8b8e017d9200d730c3e24fcc6f5f28922859c230cce593ea890f61b5fc44320ff1d3082f0dbee53d534bdcbac43de63f46f3b1b8937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32b7bd2c3db00e9102d86d584512f7b1

    SHA1

    474a93e4a0dd13754bd8356089f4e2c1e5c8c3a1

    SHA256

    c552e6f257d3ede12c9d5cbbc7eab9c9720fdd84604da2d3184dc616f235aaa7

    SHA512

    aa7c51dca67ae3063dd7b7dedd38cae38be009ceb1150ae03468082bbab8dc04dfabcc32fe96bb926533108074bc21ae7a89ac4de1344406dd631740c39165d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d35c39d5d412a9ec1774313d641d62b

    SHA1

    7758af91daad751627d0a6d7c6224927537b3f8a

    SHA256

    8c0f166d86a859b6a81a5613ada78f412653d6349a722fd6d278cfefc53c748a

    SHA512

    69fcb89fd9e788475b0c85aa1d402250724285fcb6a57b18ee9d1aeaceec445f14abec9c65f80ff8745d893f82a060ec65f784217d67bccb179c400456013bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    719b69efa6a2de46937278e315709d08

    SHA1

    6ea7ece4686dfbf830fde2c85494ec1d60691f57

    SHA256

    4b036d64ae2116f68e1564e4fc0beaa66e6db525ee09acab8dff6675d89de349

    SHA512

    cd66195e0d997705bfaac82bcfd5f43878eade7bd122057d7cc3fe5183240dd994387bcae4ed72e0bf0cda181dc784adffac524b3170baf041aa2f3dedc10483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fae86fccfcb6991eef0e1fe3bb037134

    SHA1

    10b0e978b94c1c71439966a98cb41d3c40f4af4c

    SHA256

    55ba66df8c2f7812f1a6ce4f102144d90deead57583d7194f24b7c92e96199e8

    SHA512

    5483b95e4223cd8c168093cfe0ff0625e9b371a387ef51a98ac09f40f3812dda2cffbfbf0810b402b4518eeef40fd50c69e61f5ee7ec544ea1cbd250804744f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaedb8cf0a608c5c1df43480b6f6c692

    SHA1

    6fc93c4c3395e45de7aaf72770fd35f8729f258a

    SHA256

    11153a96929ecf8f28bd7069123b18e35e8c7ce04a3e3c436f6e9a1b27c4e87e

    SHA512

    f9498034a2e3f24db8edc4203fae5ca83eb6b06e363c82c89373266d4e665b04f2bb0bb3944f2990c795a1bd3e0b731b5103fba3ad685b6356d235da10828c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9aae33e05839490b4f25272977ea9a1c

    SHA1

    7f3ea5ddc7bb601ac9a1d9b78785ee882e50229b

    SHA256

    7b2a535a96f2e64fd97024cbb0252fed93ea0b91616d4917e18dc6dc3e2e6e19

    SHA512

    447d71a8efc228d6fe4633289d29ec50711800df3b75e2194c1344916a9b7b84e469a1fca68b416ffef0fa425129cf7d2d332d67a898ed675f142a27fc1bbb97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4c1234049cb3a9453ef4d74090037a7

    SHA1

    e67ad37da921e888a18ff16d04f361ba12b47a1b

    SHA256

    55c6dbc354edb88e7ccdb19a546be1bba95b273457ed5e9fb0b6f6c25ef6cbfc

    SHA512

    a94a225439f6c9f9662b7f6b839dfdea568ab0a6448197431d32718d1bd3fc45dc74033979165bb542cec03b8f69e3702ce14c836d7cd241eb212806b7d16793

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ee08e4ccee18206858fa9db10cc977f

    SHA1

    70903e4252c4dda9bc1121beb2bdfd578d2d9f2e

    SHA256

    13b4ba3cb9237438ab62dc91fa6b92dff076e03a1890337140923679de1e63cc

    SHA512

    58b7cb082234f58fefe7e7184a2c2a572e27d026814d8751378d061c1b58e068ca2d0b402289e4f24bc37cebb159fccbe5ccbe67da2bf50282539b9439c115ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    140f9a133a844dc732ac441741d4203a

    SHA1

    3abae21ce07ae34dfd3f7791f112c884703b2392

    SHA256

    0918a5a62c3125aa4f03c9fbc55b53ce9bb34325e66f4834eaf046583a10c809

    SHA512

    06d606f23307e7a3fcb8f6cd51c980d449683952bfcd08b1254cf7c1b33ba22b58b44460ba4f24ea2d9129c88e4b1c61199ed273f953826b3c16f4fe27dc17f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e5fd55a881d33e128a6eda6b15ba849

    SHA1

    b7f3e701bd81784884d095fdb687a0f0181d3a27

    SHA256

    366e2531f2a743ef130d68ef3c56927e3a06118e7efde74e588346d498f933e1

    SHA512

    31a030db608caceb5b2c9a12ec7a3e6e6b1592be7e63e6e1b779fbc17c4a562fc6f17da536c9619791c720169199f0b515829a4f3ce0adb7eb422a564d74437c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60dda10f4eecffa4d329c03180129c8a

    SHA1

    ce6ced7d1897defe3f6f2de99881a04b590b8cf0

    SHA256

    b9e40bdae3b59929176b882fc47e734de987f51532193f432de2bc89a9875c7d

    SHA512

    675228b91327f1ea3d53d20cbbb60202c224657f3ea0600241ba5c3f9fcfff24a4cdf088f9f2df5c5a7ac6b5cefca98ad7b393451846bee1abdb9b6c4d02f134

  • C:\Users\Admin\AppData\Local\Temp\Cab7BA5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7CA4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b