Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 04:37

General

  • Target

    2af6476be8062a7c51f70f0897163895_JaffaCakes118.html

  • Size

    18KB

  • MD5

    2af6476be8062a7c51f70f0897163895

  • SHA1

    0bce1b11c15694c697c54c8b723452dcc3a7dac2

  • SHA256

    25c77fb5b372f1030d68419d07c0d14e9abd9eb3526d18e23f5fb1f69b3fea11

  • SHA512

    a21e1fb80165091356e70158aaae91f84c4f9e1d004d709af40a678ec4b4cf85bbd39fb3862d735b7992c68fbfecd46f355841247b2cc13068ce0599064e1e44

  • SSDEEP

    192:i9U5agLRWYTAw6BefzJ52ZFiA3PrQCkcb87lXGV1uLhPK1WX4bWQSIPWseTA:DLRUw6FbTQvcb87lXGV1upkWQS++A

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2af6476be8062a7c51f70f0897163895_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c52bfe1f589067e64fccdc33db0e8d50

    SHA1

    147249fb226b692012352bc597bef7ab02bf6e66

    SHA256

    41cf765c9000b30bb051975cfa44e9027c594f829b66fd252b1598799ba64ff2

    SHA512

    d199c9cf4b36b60e40b55ad0666ec6037c9903c317633353ca2f4f935d8650acbe0761a803880506b87b5770b1e6c4f9b7966822717a4999bbe48f91d3a37a68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d87176a4b3bd33e4468a55638a2f2b0

    SHA1

    d4a9d7fc6d6606c8ee8fadfe6b9faea1f6aef566

    SHA256

    b2f673107ea12c54b987d7181b0194be9f25ea5452e2e4ba885251cba5b62e97

    SHA512

    8a5f0b17206225f77832a412b6add14eaa0e512a61395f4d60c9802c97bfd75794a45bb557eaf00cfe586ab42fb5d71aee58ab413a0b7d58358f68e154a8c851

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27aa77b081686d79e2778aff897298a9

    SHA1

    225b9a3f10f1149f7e2ad942b61fa4f543c558cf

    SHA256

    70c81e8d410db99dcecaa47f9b74b7ca245705182bd400e710be6352caa8a878

    SHA512

    8cf1e5b75cfb5eddb6df549dd0d4955c03106b66180daac972a56f436f5f916ff06cafa12171b61ba48627ad35963fcb157986ff632d7cbddf77f98c319bbdf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c3242c5ee1a3e52ac6c0e7ab91d9d72

    SHA1

    01b347f4fa58d1c85455d88679e800f16fa7a5fd

    SHA256

    5d48e440312e45f5d04334bde64020357da644f2cfeabf6ebce460df641521ae

    SHA512

    0d35029e0d8159495754bb5b185a6e3cea2367f8eae22cfe194b4bf47dc0f5d88f5c6a63a587ff9a54ab354b6398161a2fa8f556cb32321211ae91c2f58fa000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76abaa8cfc140e5149f75667e4931b67

    SHA1

    1f15ef069c6b69b151063ae59a600dad2e9abaaa

    SHA256

    8768b34e591ab32d70a4c6ef49bdea29c62a39e23a0e401769d02f1948401883

    SHA512

    0583bb8c21414d7d3a98a8207071b41e01968f45c5897da763101853440a3e9f6bc855dd18b80aeb64a276e8a545cdf72ed7f1811e2328c949d08bd98ee4035f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a787af257cac1f6cfc4b349005e9ea3d

    SHA1

    48957cbdadeafb164588352c54417832edcf8d94

    SHA256

    a6e2d2f278fc9997d4862a15fba16f4563ce5d7bebc22758f20089ed9f85b25a

    SHA512

    7a80edf55b903d36c43c723992aa1ec884f4eebece03612006cc8e1475dd43821ecfb6c8bf4eee1a8cec93dd6a0e12916486878f705244ffc21c25e55adfde16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4bce7f7b6faa655152d386eabe2775d

    SHA1

    39ea654ca4ab815744856fbf817a0945659b2f65

    SHA256

    c9d80dfc6d7932b9fd4f5b886b8347e873766b504731167dd58454b34eae399c

    SHA512

    5946ca944268388374b7cf80729f4e54bdfba24107586753aab2fb847613fda642de3c65346301e3105ad012d36c5444e036c68d2cdce25b3f8e03574a615ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d82db69863904afcbe95b77eb8f1aab

    SHA1

    424db0a743400dcc0c31a61cd17a0e718a396d60

    SHA256

    d31be0296646ccff477fc6accb19742e52c24b559b07c09f2a831dee8ab90bee

    SHA512

    0b9d8402d653b4143addcb27f5f3f83e19a2e1eba28174e9a9d5385e0b0ee998894eaae53f854b2a454784b1ac7118504afe42c97c74002b99d2aa3f37ca383a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0ad5f6916c8bda8b2d2a58a746e6cc9

    SHA1

    647329b1497d1574d8ef109b5b91bd4068ebfe99

    SHA256

    77f094e0bc8a264bbf2629622207dc398a6cf07318724cc103e82c2e632dc38f

    SHA512

    614aa5a759880f25d28593944d39071687049df20aa6f4237ad8b1845af867aadd5feb5705cd200285d65fc9e6fd51d78171baa55b777aa1d54546d7010ae237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4c1ec53e82c610185fd3a0e211e9fb1

    SHA1

    a567d2b17c0d32bff7bcba99c46334f928e94941

    SHA256

    5e345eff22b0b75259d7968127b9265b3e07bdf06b61fe39ddb5b421c4ecc838

    SHA512

    067b82954010df68e2420d9d1f0f700ffc7cd756946ae8e7bac76750d42778fe4c157f3404fdee9fdcaf3afbca5b51156ee3da90dc73d0952251cccb227f8541

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b23f8d8fc43eb95dfbf57928534f3b8c

    SHA1

    c77dd6868dafbcb6870e62ffb701fc146e31f037

    SHA256

    0136058c5e608421353d05052fb0461fe576a7f32f999bd647fe72a7e1a89bf0

    SHA512

    9a086ea79bed76bad5f734d3126cee57a6dcce4ec28b30f5680d5cd92a6bc2c5dc89273579afb8b3b5f3c2e851c653e7724bbaa3c03a1e63b7d50a8cb0da9868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1aa5fed30db9748ffe94173db1ddf0e

    SHA1

    9dd0d02c2a8d710d9e1de6a11880ab1e239a0cc1

    SHA256

    0848c7c51921a082804f6eccc28040537d0b217f63de23469130ae982684917e

    SHA512

    1d902bba47e1fd01957210b3f0c937e23e0924e0a8dc9fd761c5ae02687b00b111ffc807c69587664f22ba87f0e03c8fa364e85c33fc10094ddd59cc8c61a047

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c8ae785a34039056ee0ab053dade37e

    SHA1

    f9320db2060dab3b72cb5c48870f356bb2bd4e70

    SHA256

    44d776496c292de15a2660340a4c6936ff569354ffc285960a8a8963bc7d8037

    SHA512

    31e9edb06b04b7bacebb162ef91ee4fb1a518b2dc70f0b9b22444017e7b99bcd0a573694c29a6149f01e4922531367f3c39edd88005bc5916d751ccbf7fccf09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8175742f5ce07196efeb101e07928b6

    SHA1

    741cdf74c52decdda30636aa9ce890d072f7e023

    SHA256

    b09500ad67eb96fda9049810cd00ee3ae9f29799df0d97bd101a05bc2f420ca3

    SHA512

    ba19aba78b7118d7cdfc4b4bbabefba85e8b2feed7b734df966bdf39f7d05d080a8ba6ef72cb8a4f8d8d34568b979ccfd41b2292e34e47919fb601d8837b2c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac4b00f57f81687a47eb38f72834f012

    SHA1

    1848ff291bec3a54be7f9db575cd037de9362821

    SHA256

    3e0da3f2467a9d1dbdfa40a113c40a2cecb0260e08078d9cb6024393cdd46b2d

    SHA512

    1dad8754a70752063c6a97ba3624c1903d63b2e6be8d2c4f4d904b818f11d71549b3e98c92d344ee733dcc9855cf4156631ecd671a05dd5b593dbd5e506fcb60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    538c02825e778df0d9e8e94247e233c5

    SHA1

    33942e00c38fd4fb47f43a5805dcf20c4142b1bf

    SHA256

    4cb8425fa90483519c3f816468c3af6af786881a76675793342117fc0775c895

    SHA512

    e978db70779683489b66c696ae2745954abcab869f678f3228d97e80933f93e506836277fc75dea3c4ec981b52361823aa1860e7d07d659101e852f031918375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    201fb0a59ffc1516303087540b3a151f

    SHA1

    94f9f433f1945d930c86be933d5d17fbbd164a03

    SHA256

    7704edbe4e9c5b6aa0336336d308a6603b0b807dfc00d888e3cc6632f0e463b6

    SHA512

    6dc47fed533167ae2e0c624c0ee9c34a5caaadf8fa47a970ffeb4111e20a7cee2dae43cdea0cf66788b1800fd2d552adbb73d0009ecc41098068c2a065c7678e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    575bd0956759fe7f10c8e8cbfe19036d

    SHA1

    7acb236704773551769b29489222e933df75bfd3

    SHA256

    694f3db9e914bbf015dd47a86384d50fbc6b21ac4b8a87671d9ff55985bd3194

    SHA512

    f2565ec5d548e3a10a8f62e138b8638ff8121f19ef2274b255a9b56a85584392db91ad4f334555e8f0871ce867545458a8817e83fc0f6212f8ec1dd4feb8dc8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1456fd10a6c7b7a64b2c4d5fe657b4e

    SHA1

    a635799e05e19127d512dd931874895f1b3e4eb1

    SHA256

    51aad72964774aa6c8a03af26b7af232781675a8d65205e8e933678ba546b5d2

    SHA512

    9ab4854daa5796f4432f413d76f1631abb90fa9c561ed711fc1eadc18ffece9d9c5a6cc875ccd1aa194121ec0cf9cecfae3fde361591c193c293988ecc61fde2

  • C:\Users\Admin\AppData\Local\Temp\CabF5C7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF666.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b