Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 06:31

General

  • Target

    2c8138bef006092439107b3ab657b577_JaffaCakes118.html

  • Size

    67KB

  • MD5

    2c8138bef006092439107b3ab657b577

  • SHA1

    7a89166209c6b1f117752bf8998c4aa0f8dae449

  • SHA256

    aa67b055ce68cb018e2bd77191ef5a5e1c1c8d5b5c2a70d84ffe8b71ef6ac3d5

  • SHA512

    c5c3c3eb3ec25e4803ec55a90e834401e6644916856479dc7567b7732340edfdfb6eb2969c67e6f9d2e81494ba698cb58d0c0e9b2884a35be0772c75a0814d9b

  • SSDEEP

    768:JibgcMsSZ8tN99OIsEXjiBoTyfQCZkoTnMdtbBnfBgN8/oygcR/QFVG8c//IjkKy:J9WbTePec0tbrga6cuNnzIjv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c8138bef006092439107b3ab657b577_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a111a07c609ff80527de03ec69cf56fc

    SHA1

    dc02a6387120c20f52b8d7bdfe826bd812464e49

    SHA256

    82ea000631e31c3c3796019b02312959a84f59502c5728be593a9a4ee1396c92

    SHA512

    c151bec177f31ebf0ad4a8f05d51781dc7091d0314f0054f999b5b4940cd2ebbbbbfa11e0e82b470c0f4a3a046c1a00480e7fa753c2344111e5efd0e09b5e2e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cbda8a983600b70b3af5b0ad2350ecb

    SHA1

    4472ef3ab3d3cdb28da150bb10d7da460a0d6d90

    SHA256

    efde926123e14406e78bc0d14504db1c59f5fb075e366d20cce4752d910b367b

    SHA512

    87d8971a57d9f0132e8a7030a641e3399624345e233e8a54bb1973fc14d1ece194f52b9cbf354cc4d99ed656a81cdbadb8bdcf263c131c5eb128203bf1aa25ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38e05d0076b7b1f67bdc36defaa8e6d2

    SHA1

    dadcbbf1b50f9433184f83a4702a724e224c7057

    SHA256

    21e941de25c2a8feb856c50220457450d654f67e8134b7f6360f8f1de753273a

    SHA512

    8226cebeb563e00e6d88c4b25fadd047cbfc203e92ca45a0307e05cea3c42f506951020adb2efd14149d9a75d6c53b4e3c5018b32db365f0b491ecc6432bd1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9d400d90a829c08786db6c157d81056

    SHA1

    87c9701ff04f7386f1b371829732fa23abafa63d

    SHA256

    569d97a0aad5ff703cd6afc96cd3b90f136b51325e1bde53f077feb6c54db5c2

    SHA512

    3596616f81551b0b7f6a4fbe4f9857695f814d41c77a1c99941534119ca91836561ae9a77f81203cd2cc15ca8a6ffb8a30edef6fac7a69131333832c5cb83757

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1389ec818040b325acd3321060a9d2b

    SHA1

    db50a45b8a6c7e0fbc74746a3dd691b733b1dbac

    SHA256

    7f34e9d29936de5649cbc9f5c2cceb0f146f80a3bf8c224b4e2bdf7546ee4b05

    SHA512

    61ae47cabaf328df7d63e99bec9ef4fbf4bbc612deef17238cef71b264f27e3362e17341e1bc950e63dc5d88607630bbd0e672f6207d2cea6a65002c2b0357ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88bf3343814229fc7c6323df8eb4367a

    SHA1

    de2db3bcaba2be6611f6d8629dcc4bf616dde7aa

    SHA256

    41eba15de43d36447aa5e1da015221b919ea1039aeb834bbc0ee85bb67db8e78

    SHA512

    9f91c6cf2ab2dfca6910153d269d2f0dc417e66258429fcea6477ff46ae594056e7acda36c3114664b43f08184b4f8720d66e3bdaf69893848410d7b35933e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57dc06432c9b50463610785082671826

    SHA1

    84784f65bd45888053a710b38ec528afc7c83819

    SHA256

    a3c0c6bef671e055b9e0fc7f353628073ee622bef0b239276a74e28faac93450

    SHA512

    a875c752488860ee410e373641af4ae7b07be08bb7352ef60decbb1e58165763d04a2268a4724d3c5ee47caefc96b93d971dcbda138e8236e50a463a7ff55d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8aa4c774db93d506edf2d7209769bb4

    SHA1

    1f25f078d620a91c4e53f813182e47114b24f735

    SHA256

    b7c833f01efd0b5c1a30ecdcecf42f82710c2d18651532046eae1d4c208c45c3

    SHA512

    2ebd297659c246615c431242e527cbcac35d81bb60b8fe3cb4c31dfe9cbcd09e156a0911b22851b253fc671f11bc3c1038d2073802622bd4794a05ca3aac2051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    618650d0b0b7e0dc8ce0b3c52fe2c47a

    SHA1

    fb668e2dbb14c2c19281d9c5b2aaa00852de70e1

    SHA256

    757e61f3ce4afa5b991a69245fe8206b4d731979e59777903bbfa34158417739

    SHA512

    dcd0b65e7e9df37bd1cef8bae563669c494e38543a7f90cf7251efbd2eb96431b7b7dc87dd561588650ddddc8f0a92fb3b60dd2bbc434cd7b519326d5899f403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa91e20d05baf27a1f263d1a2fabd7c4

    SHA1

    fe8259804dc2730aa9fe9e6b943a2a05b3f8d4fe

    SHA256

    4d2a3f6086a89759b3fabf025de56fd5db7e26ac1d6f7d944c48229926612956

    SHA512

    28849581c49864f0aad125194b9b1e4a5f770a6e3f24abdf51e028d281fdaffeb8d68a1bdede6c2f8f1f48e1127180c7a29188c0c500a5b092230d4456a216ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6da6dfd89c66a6667ea9443ce06a9c93

    SHA1

    4c89a2774270e2fd53726957ef5f6340a5f9e9f9

    SHA256

    19c1b60ae0b0acbd84adc0a19d5fbf411161a30f565b241593679eb1b0e3d9e0

    SHA512

    77937e46b4bcd63cf11feb431a70752c3b6ee1c798877fddcf41b2bffbd7ccb318933a8cfd7e636479da13d7ae6f65ba61ae973c110475b80ba8ecb6c116ff21

  • C:\Users\Admin\AppData\Local\Temp\CabD9B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b