Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 09:46

General

  • Target

    2eef68455dcb6f95579e2c4458592354_JaffaCakes118.html

  • Size

    3KB

  • MD5

    2eef68455dcb6f95579e2c4458592354

  • SHA1

    5f9c05a9d909650186357f304ef464e9bd884902

  • SHA256

    aab41369bd3ec0932bc13fd1685b7da3308c08a24b6c6ba923060589837e9868

  • SHA512

    7d521e8c57935e4b11d8538ea770144f30fa896715066ebaacbf3e9b6261a674fe500f3723cad4f0da48355d8b6f45933897a83d8859fb2dadc671b026284bce

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2eef68455dcb6f95579e2c4458592354_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2624 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62ddb0ed9958967a621f44289be4a910

    SHA1

    9ac5dbfefd65fe99573fb7f69a7208130318fe01

    SHA256

    ae10887d7b2ae43f54c19459ec6edac079b460cd6d7ce149b5cefa9759186408

    SHA512

    7fefdffbdb273744492d6046cd70bf7ec72ca1557b40ff8b9f06f48c625df3e28b17680dbeed366912d311515a8a399de1640d9f8bd2e36e9d250d524c5c2501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    179fd9e86428edf3d75780681d64884b

    SHA1

    cbf4826a57f57d772e0f5f2bfd4f29d0a856fb82

    SHA256

    0499acb98efe2b037fa252e7f6e62bc5556eff7a2e7e99dc0e0aeb8e1b69e859

    SHA512

    543c773ddf5c6709d1e3495107906d09175f15f7aa6ac6163bfa82381fc39cef3a81eade271bcc671a16269c33076f5cc9adfb5629975b700e302ace69592a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    656c3238334b8c0d5548a4d386ae5628

    SHA1

    43527eba2607d8697cd44c502a9528c441d24fb0

    SHA256

    37d7ec4005a3209eba66e39a838c7ff176495f47de6ec05005e217d167ce4247

    SHA512

    b6dfaa615c26cf4c31d34c2ad38702bc80a0cb98db3f0fd3e0413a1f94a5c2ff26db491075f96682a29da21647e84ba7b05501722d3a4d711068f07a2f1f24c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1fde1cb557f11a9deb71d8a8066438e

    SHA1

    411880d57120a1f7f4aaeaeeb660b753f514f44b

    SHA256

    7abb1a3d8a43d966f58e2a7bd43fc6fe481a910057ebf16bc3c8327fda4d7fa7

    SHA512

    42597e9dc3967761991293da3afdffb4e7a7fc9be03ea9750aeadd5e733710bb9b053e47137fb61714fb43a6a57e795ea74ba82e56bf795800766cecabb8119f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3e81e5de64ceddd31b937e45e3e490d

    SHA1

    e17d3f7c6108407a5ba88424e3d5d8e7375462d2

    SHA256

    5b353e34aafc4bb074d4f8de157169fafae9b917d3492a6aab1d8d779c4bf205

    SHA512

    dfefa477ef5492cea1e58096743e9ee2005c440d1f5a242717bef5695b2711ed7739abebf332c71e369273e70edfb259605f7355bf4946c4dfcf047e68e48393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0502fc20e32e8791de700c73443d14e1

    SHA1

    d4375ef10336ecc388df4ecad057e5c250dea09c

    SHA256

    e94ede2b732ee7dd114f34876685c137babe5f29c330465d9ba914732544222a

    SHA512

    6f31c310cfdbfaa576fd9ff1135b98cd96f4b1659bf5ef2e290b50fc387315beb02618d8d9dfa8886944b3af36292b314b3cdd10755c2132af9b66ebb96112e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02c93dd5add8fca116d2b341cb7632e6

    SHA1

    1e1727e0a63b7852bb6b6bd2abc31f37346ecf71

    SHA256

    9d30b0cd1734a575886aa78c7c4631671cc5c2e7f24db7856e1609eb15de108d

    SHA512

    aa44584aa6232f020fe30a6a98f10b5e8df187a1a2973d7550fe52e0f2322c0e4e7d4a09cb5a78a88391ba4339b85b256551cdb807099792d15d069538faa2a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8160e454a868ce0179ad60e7760daa1

    SHA1

    05c82f34d7830e20f55add6f342215bb85290fc2

    SHA256

    7dac3f2a220a1a5d1ba35c82b0bc001af330992b0c2ab7be55a36df40a679c8f

    SHA512

    e6230ff166a9343a25b4c478f5aca1db588e1f4e9a14bd3c32ca4341886d50496c44df55f3cffaf62f6fee6dd68275193c1c7220fe9da2a98378f26f5598e89e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ebeb57f42de5ff377445d5592ba7a52

    SHA1

    da07de8d3c8cad041a7414c80281bb68287bd5a3

    SHA256

    ea641b6960a54f87e496deb5cc4c489d9e290602b0cfe277b3a186631744b777

    SHA512

    35ead17488df6a8d046cb6a595db963e92785a62a9e34dac03d1be80435d44e345ea840794186b8dfc327ccff27522f3381a8f8755a07c778a3b351a95cb2e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba16c1f927c9822559ffef4518ff7041

    SHA1

    56db257dbbdae48fb4c43cfcde6b8e8fc6662b74

    SHA256

    e690fff80da4e0a945001cecec312b1ed517838659e8524e7e809a517b9a1bd0

    SHA512

    2c583243e26b8414688bdfb973c16182bea6042612d133451905895c8ffacfefde7f291a243f0cc12fda960afceeb61b7b9ce556534d47813eb576ba40381b66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c419114dbba519de154660c7e970459a

    SHA1

    7d89befea743eeb33b38b7b3201ec96d0fb88038

    SHA256

    5737d9ead20c63664425ba126951028ee5e454a88e8947433ce0c49a3dd4d2df

    SHA512

    b7e056a82289fc46662ad523e6cd84039ba1a35c9f49c7becef589337f7047d8df2a7b2ed0ce68986f8ceacb6774a0a8c215e950369bcbc333a3e14b9d5cbedf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60d573e218ff73fe3379685c8fcf1774

    SHA1

    b0527162817d5c8d60ec9fd654a8edaa79943afa

    SHA256

    da36677bbf3118da76e1f0ecfd0d5cafe7f28cf6bae1c92cdb76c5b03e68b091

    SHA512

    d91253d591030585ccb8b89bab6323d8cdcb18979c8d35f9fd69a6a7d64d8ad9e8f1990c580ebffadf74d797deecdc4375f7dfe76971745ff67d76146069cc4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28610394c5450f7de66fab75b608ce0e

    SHA1

    4e4e82f57cfce83502f7d9f7e8e94fa2dd78bc61

    SHA256

    b0f64e67964f6e41adb49001a2d0faee61c4a11421b29575c2abd8c8c58b9b60

    SHA512

    f3ee2615cb9b4307c7bdcdae1ce88a008f6bcc433ce66b3eb3af076fb58dd44473f0528808ec78de713c686958e97edd77b89ec0b3aa1dec2c2c2b1f4c83265f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77f8c5e470437ca6f8b7f6205acef55c

    SHA1

    79c70d6f6df2eb632e55c609e2c3b99a8bcd41a0

    SHA256

    d1a35b1931c2aeee1d4a6cd54f0537d871d7beb5b296f888634d0809f5a4f0ad

    SHA512

    3fe71b6688869052e14ffca9c6aa93b97e4500b27d2d4d8d889e97eac796504642fceba09c6964999f9a2b5f593b207f3af31f58655c747f3295a4fa1b75abb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    464145d949dd04e3e7f1dab53f7582cb

    SHA1

    6d0d1d8fe191fa31c063c3795bf47f275234c42d

    SHA256

    70b64353857ec6131023dd1b18b6d593e9e084dd80ef2ffe99328ea7aea80cf6

    SHA512

    f5950735858e080ccba057c251f19e5aee983a1039066bdf8c4ad4ca08f2ff36ccbeff82bd0b2f0133767c70adbdfcf0960e8214e32784b809ace009764b30a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c78272d8318d1f7118ad1337cb749a7e

    SHA1

    56b516161bd3bd62e299123cdeb476e75ea9de25

    SHA256

    a0d9eb65c528bd2f20ed71b237fc5d7b06fbf448927cc79f7b445bc15b3dcda2

    SHA512

    c7af0667eee174d10a7f8092442b74532773f8a572dcd627f090f55c46a338f7cc9cb86eeedbbaddd15946f9855fb3e432f87013112de8e9e20126178e02f590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51be72ec9e6df2e844faf078db874a9d

    SHA1

    7473e81e64546cd0ad046557018f3f45b5d69431

    SHA256

    ad653aad8f67b633225baa30ddb066840efce60ae85c0c9c00e5a500c7041513

    SHA512

    70e106d0ee813f6ec2f406284f97f9602da56f227b306b7f8ab0a959aa9bf59cd9d82d423d53f036b8b0337830637e97fae3a1d9e2e11c9085dd44e4329efbed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df7ea98e43251c9edab2b579fc34b22e

    SHA1

    ae8cc88ff6fa3d55312d4b6011ffdd3560299b49

    SHA256

    4d35eb6e6c7124ae67474c3f6a1dab18360f4b8790b06698e3b7db71f3e4d5cb

    SHA512

    75331fc9ccc716265861115891b553d60aa29e25c6a6123cf0e197ccb8bcc2797880173760c7c3e27ed9f8037dab48829ace50b5f47e7b15a2cea40e5c79506c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9ebf507022e0e8f11b7750642e68f19

    SHA1

    677e1688d9dae9c197ef2868a55277965a16fbeb

    SHA256

    10fff17a74ca9bfa3d54af00731b28428ad72c3173e86675754713a6b8cc0a2a

    SHA512

    5f5492eefe1e9967c8854634660d6870ad2e2dc9a250d6b155189d17c522dd94c9dbb6f375615990d28389b8771755253d3123cd575a0ecfc11f68cfe7e9b3ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fa7847e505eb4ff889895bfc9922029

    SHA1

    62ad9b1ae8288d86e5828987ce2279789bc774d5

    SHA256

    36ad242ed53850c68fdd1a1b7d3ba1cdab36e639d45077374487fe9e95d8e6ef

    SHA512

    f21bffcde0912a962330162c57f1ba055d0cacb5c1e2f74b8fdae2e189a0165adb417258aa67da922075ce32abe2f0b0287b747c9acbcb39d2ed6a7c70479905

  • C:\Users\Admin\AppData\Local\Temp\Cab2050.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar20EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b