Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2024, 15:02

General

  • Target

    307c1e2b200fa9675d324393ebdd41a3_JaffaCakes118.html

  • Size

    139KB

  • MD5

    307c1e2b200fa9675d324393ebdd41a3

  • SHA1

    09f982624b3fb30b1464c976718ab0989edfc17d

  • SHA256

    4739275605ece61b3434d6fa3a620958f8954835fe411874e95363bd73f1c3f6

  • SHA512

    d99bd12c63e2e5deee0d0397ee33f22d5c7e1817bae580216837ebdb9ced2a81e765b456bc5e8253f97f435fe406751bf563102b593f83ff93af39fefb737e27

  • SSDEEP

    1536:S+bpSKhTLTeM23lTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:S+bTOyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\307c1e2b200fa9675d324393ebdd41a3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78eafb649d393d6cf110c859c4831cf1

    SHA1

    f05287e6ad0e5933d221e5c64f6b4b9efaff7169

    SHA256

    2f43d74a8d6885a5327365775d6054f1f5a532b9c7ab9f4255c38483b4297fba

    SHA512

    4da9409e2f81b138e4b1efa68c2cfaeaa6503cf91dd33fee9bfb76e7a30fb6efed8270bdf2d099d6dc346b2f3e3dc70008e9df3f0640e0ef907e885afc69e55c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac2f0ee75774d75fd083f3eb82bdce9

    SHA1

    5d9a2928d08c3d0d1f86b6d0e2167461e95f715e

    SHA256

    b36691ce1da600350091116ee94e383297204f577f945f9c3e60252c99da60c1

    SHA512

    f79c72e802ee3e26b9aade20bc2d1472900974e5628061c7909a685fe01a8180b45d4245557ae19d417ff2bc870c04c82af87961d33db556fe199a35e3b63d63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ccce345c4bfdc27db6634107c03bac4

    SHA1

    434da01a0b044f48c6566160478ca2d6bc58a840

    SHA256

    d6aff1b9283478bce2a82dda965c6de0679bf3d2bacd9ad921958a1b340c244f

    SHA512

    68433ea1a123a8c7a75c8ae721855bb8c4bc27d36f4b6fc8954be425d3b53145eb226569e75d97cd30fecd6184d9e5b2afcf3f91988d58103fb24dc08c09ef3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fae455f25220ae689581960fad72ea1

    SHA1

    92f1d412f7fea2007cc44789980138f199509c17

    SHA256

    1d2cf233cf8b3d0e4f09f33f3a87a219dadac7e4998cc9b7a7655c0f215a40ba

    SHA512

    b46619eddd842c0e80c48486cab850b07429f6aacf07f85bfed5bfb17c4cdf259aaac1b7f33e641c50ec395e6cc8c96d0b6afd0da5c3bf91c465e44aaa8e1c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab2c530d4540933132e3ef12ab0a6506

    SHA1

    b6b29e37142186421509481a15dbf0ae010e3d41

    SHA256

    0bd0aa4c3a7372a4be5edc0bf1951e547a44a255ce2702640a37fd042d77c50f

    SHA512

    085a5dd46b46d3f04c713239d9a536c7ca49a3570995d211acb4b362995c3cd5a1eed598b3d74086ab30211b91444e0bf14bdc128d147b501498c8f4842a707d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97504766537967ab2e2990c05d30d55c

    SHA1

    5555c185ea8523d2d1509b84d14b3d15762af9e1

    SHA256

    d06083ea0be2fec4494c9fdb3e0719fd738328f883c9bdd2a33a365af029b7a9

    SHA512

    528987221c068d5e60cc878c9de76d96ef3c684b83688fdb454d241bd6f842d4dba8b22f65698dfafb1e65dce4e7c011a6ab4cb5081d076055678aaa562ef681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    620d85c822a2c6be3959381e7606aa44

    SHA1

    0cc58bf400dc56208cf68aa1a06a462bf6f52173

    SHA256

    118a2190e277e139ed95714855a258a261cbd200529d6920d7fddcf916aee7cf

    SHA512

    13b6c5da5474debec900576e047af40d90a52778a28b6a3dcac750ea2abd325a9c2e48765970af61846ec32954aada2db8df224903fafde0da492abcb4208053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66fda04266b13d9940c4b7ec6c9cfb2

    SHA1

    24c4f551d60ab99f6ff7561377889e80f68abc12

    SHA256

    b0155fcf5dd2105218f617a809440f5602ef510b3a83eb859afd05a5079bb3f7

    SHA512

    1853c1fa9630bd4b06fdc83d7e701a48f40ea7a8014c9bae89ab8929a1ca154ecc4e0f52edbb4874b376a7ad3025d38f9c2987e65bb0cb96b3dbc85bab9dafe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dcce62c8729d1defe01654c493c2d07

    SHA1

    3d0eafa761234ba999e3a9df56c10607c4516d45

    SHA256

    f991e50e6813da9792e24e2eaabb5cb01cc3bec3320fd82f51f734b645b8aafd

    SHA512

    a7ecaae6969372a2b74f1493881437a9d9534b6dec6b9ca31fe8eec7100b93be6690705a1176b943303ee7e51235f0272f409fa5c980167f5462ecaabc4d5035

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae2600953793a0f5a7f219467b0b4125

    SHA1

    a713845c8ba68931676e6ddd8383cb2fb9244532

    SHA256

    0be2ba2dbd0665c9601621b031d1472a23d5ffeb04f08265bda5aae84938f502

    SHA512

    6c7e2cad9fbd2a2515161048604f6dc1162f0613b094ab01e36284cd51588959967d0027f759e86c9f4186164f10c188b623fb26d5a335c036e58355fa1ddf60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a678b2c418737907ef5bfba5780a0fd2

    SHA1

    184a5df24d473e4aee452c1119217334f4c013e1

    SHA256

    3b96d2aa740821c243f759d5245de7b8b6294eaef240c5953bda9e811299a3c4

    SHA512

    34c9768bb2deb063ce47c5e931da225440eb560a8c09eb7ff62d2876b0bad007c4aa543b21f0c557145782ecab7d88db94d4ab524370021d1f830d870462f405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f47b6693cab3bcf9ab1b989f67822bb

    SHA1

    e781fedf828d1312ed2e494c796b6a3f6e945e26

    SHA256

    3f59dffbd76e9326749c08f375185c5236e5bf8c2a8a79a1c998008d2fb9a5fe

    SHA512

    fbb2b8aa743e4c1fd94aa2dd56ce8399e9fe04655aabb9bd2181cda6a38e29c5f8ec8e74812506f578b5f0dc2a61d062401da42d117b29de30ed46c23aa5250e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c3bdcc396ffce8a919870f807b2a9c3

    SHA1

    73ed78d003c8d8351ed463df36bbb22f98be08e5

    SHA256

    084779abfa90e1259cfd336ba2f18f93a6089f30c692e7168c2659c5b3e629d0

    SHA512

    e87bfca23567bb718208c7092282dccccded8654eba8b014ce8963a6d171d5901a229918c1d071dc8e980f82866ee40809317cd093e39cdb36751e04677355e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    064634e1b4920e750957b3fc4a59eeb5

    SHA1

    f49683400e42d628453f7e8c7e26d4e719b8226f

    SHA256

    1ed98aad8bf955b7476e542e9f682ec0175c3b9b1d9ee30430b5e367feed1a4a

    SHA512

    7bc1af1e1f3cabc5d15030a6cc21413cb43a327d8c3324bf0b9ab70523ccdab717c253d16fb1b05e763a036b8e74430da32545bf2eab83b95f278e87be5ada16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    906c9cff8a0275ada014643995cd601b

    SHA1

    e0333e0147cc64738907a7058621d824489a0ff5

    SHA256

    fa10a7fbaf79ba358ffe25285cf9aadc193d980e1e63766d37b1d0a519fcae16

    SHA512

    9cecca32075765821f15915ef2695be2969e0f968172ba15d0174121e604348b9f74249b9ac18f7547a9facbdbb6182cb9f392f12fa3d4848009a606db6a8aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d63de32d8fe725d7cfdd5bc1f9a1c51

    SHA1

    03f9528431686ea063b5c31dae23dd271ecbbd38

    SHA256

    d94a49e4e26973750f0fff66215106efcfe55a006e0f7287293645eeadfb247b

    SHA512

    4669661d4bcc369beb8c5634876ac089fb9cc5166c560492acba90e210e92088ca3e46c1b6b104b78043fdae0d19a6174b55fd7738a0ca47b786a6c0633763ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8978a5f848c2529f1bd77ee921fdc38

    SHA1

    32d4c2af87d9585e7f90e5136d81ad69d12f6d40

    SHA256

    43c0349c95ce82c5d568fd95f2625c1deeb644693e05277214ac24af01d47e39

    SHA512

    6ed6098cc62f13fb0d3462884849110f3ce63c34a72399643b411b2f1a30351ce82fb90561dd5ab6bd97bd62df12510c7100c7722f29416cbfac2a140f2b1307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0131cee91c5d80fc58f2514b187a737c

    SHA1

    b6057a98cc3fc94339fa1031f2ae47e97847bc0e

    SHA256

    be1ccf903e0b8ff250f2c719b655c18acdf33e265f846b8a753d85dec5327e4a

    SHA512

    1ed624ee7066200e97cd7ac608a1747b07a875d0c07bd4538df289274160ccf87bd31e9b67ae1682e0d035d5edbb794bb0144f3b091b84739a58d387830e5a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1936dbbc56ec3101ed9ea1e35e8ff55

    SHA1

    74690bd80f681b23e866ece223cc976ba85f26a6

    SHA256

    d814d1adc8a79bd62cc2feb394ea4047845e1432bfb9604eff0ada05bb70c54d

    SHA512

    dff28ec17620d1ab386db7b377fb2ea5b0f869164c8f8454b0921af904251cc02952f787a0ffcd905eb1f1b4b3a1a4370c6b6c03dc2b0b1cbcee264e5a1edd41

  • C:\Users\Admin\AppData\Local\Temp\CabA860.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA910.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b