Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 22:29

General

  • Target

    3c5caae677c27af30a1aebad37d7efe3_JaffaCakes118.html

  • Size

    139KB

  • MD5

    3c5caae677c27af30a1aebad37d7efe3

  • SHA1

    be633361652e54764aca25be3c9db0c0023ba869

  • SHA256

    0dfa43be43965aae8bdbff1095dc1ccc655646b2c0682065e8df24dc404ae625

  • SHA512

    70fd36d8f9981aec78d78a114d5da7f1f3538f1d8a4958ef4a6e39862455b103a6a480bdc60c01fed97292f18a96ce7dd03d78abf74aaea75928d5907f763152

  • SSDEEP

    1536:SMNM1wzCYlh5/an4lUZtyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:SMI7yfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c5caae677c27af30a1aebad37d7efe3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be8a641f51f9d1a59795cdbb3614abcc

    SHA1

    2b7893a0f5bf7ce8a19ddcf2b8018a169517a34d

    SHA256

    eeb5d365136ee12c5319cc2a41550669c508645cf70e64dc43287e00cb83d00c

    SHA512

    41bdfe8ad06786b1884ff8c0c9b4ed4ef1c884f913c332c6ccaaf908cb1387b80b414ad78cd850542899d015308b51987fa0cf186a0b7a5b86afae118f0fbcd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74e80e1044e90ca9c0203843dcf68f21

    SHA1

    311c2e52fc76b173dd0012e896c2fecd02cc5b77

    SHA256

    28179e282dfab85aa949de01d3b3158faab65a325c9c870076241d8ee392b5a9

    SHA512

    45c7cd4765cf1736f5e047e5b06af1ba96b37c85ec827d28ca1e13cda91cf104892da5bba158bb5653398541cd563ec35ad590fbf0b2999ac98fa87094b56c79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24cd69b6d37923d466a0b08828b3cd4c

    SHA1

    25a7e4162bc655f5ab54dcc321c1a2660781846f

    SHA256

    de82024e1d3da7d19f518640857c62dc18107007f27e49edaf4e56f55e34b4b2

    SHA512

    496dfdbd2f9e8711b1a00a43a6c32fae6f6ea41f5cd1f6ff4cf34cf95807fa40c12c67813ea288eb1694a054dc5a33d682fc09344f124d3561b1af30f9c32f39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c85675ab386813c39781c1ed6a1beea7

    SHA1

    d3f6252c07aea5a9b4f3118a01288944cefb0fce

    SHA256

    768f8ea6e23a115116ba216d16d3dc06ee601255399812a7129dfe2be23a94fb

    SHA512

    655b4d2c16e8da095ad1da3c30e8394c4b86f257550ad7781b48948716193fa596247ee087cb93e2748f0de7bbcee239014053827a6339f1ca53291c95e90ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    974a74302904cb2610d62deafb399f84

    SHA1

    68f9b140440e7f25872838858f140a2382da59bd

    SHA256

    c06c0b353c1d122199f799ef3dbaf99a7be63054c7c6e1f42ea574256f873d81

    SHA512

    3a57689ac51b43c6b43f2804355a70f5c54e42003e3b848be74b2ceb5dfbf9d30eac3c4367187d374f95c764d93fb990c81c0af68a000553aab78fd21c39b891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17fe212bd46124f00d16dd2683cdf3c1

    SHA1

    60a2fa9ba5ab5909e4052b8f26da72b2db1dc56e

    SHA256

    9762565b3259de1295045170eab0d756d58199a0a9e6e49a2966bc6e4cef6548

    SHA512

    6647f5eb0f9c779b6476d661d57412b0a5e133e1586cace9dc9afd0d8432e9aca5e75cd2c75d7d00af64ca87e63704450e4f77612903a355d02ba8d0b556b193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ef52e6439af7ae776839667f615fbc0

    SHA1

    9db04d6df689f44688f7f344f685cc42f7d527a6

    SHA256

    7b94868710547123dbe644ab6407978281a1bf42e1aec5ba78c4bcf3c0134018

    SHA512

    2f5d238fc8e10191584e1ac8d3e4d18af03da74c16b864f2157058fe296a9928f8ef9b4500d675050b17fe85af374ce80e6c5275cf2482ee2aae38be574c6077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32ccd70fcc63922d1b20d1adb63c1a7e

    SHA1

    5f6ecd34916df2488f8636148e890c39751bd46b

    SHA256

    19aea1c0192e4ba1f39ded620359bb2b76c363173a4632c51d437fc1b06e1777

    SHA512

    d67b078a392d47ec045c6d06a2168ffaea52955d94d98bac63bf9a407f4a9855d42749215184b75ab72bd549812640820c72bfa79f40494d38be5e01c5ca32bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78cb4f6b8d41915c914317053532690a

    SHA1

    fa55b14b1cd20a099d5216826e9928992e980819

    SHA256

    66b3bcc361914de9166b75c726230a9de826e978c382dbf94e64d205e1f73ac7

    SHA512

    a49000f455a0dfca0c894f150a793e2a9d1b79b0d4ec6c8c8876f05ce6b717640487c67b46270cb8c504c84b7c6c7b7ccde645bf3c973ce85a72e418a75dc133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    503602a5f2f254f4e86c243304520499

    SHA1

    64f55fdf2624ac4134e92026a9449f0a84e035c8

    SHA256

    c843e22db5d35ff30c357525193a082582f4fab5d626faf811aee8241b00100f

    SHA512

    7fa949ee56ee4f609a8eb254ad32f09bbf0a0151830578a8f60ae8a9fdf76cbbee085310d9eca94afa470ca02c13f3292f66c80545b064a5740e74cddff1dc71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5079cdf745d46da68356b82257749cf4

    SHA1

    d2a31802e6dea76f34a0446dee66ba8498c269aa

    SHA256

    ca874087f0594a859ae13097bc327dddf41347e23d054952d96084844afcabd9

    SHA512

    61b8626af4211e1321c2ce0d8dc488d411517db1e48a87119c508739736aedc70577dc511002ae8db9ca4a8f6b399639661f0bb48e3b1f0679d1bd342cade908

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a0d2dda40d298efc74c0b0bd5a459b5

    SHA1

    b46be2490d8c9e252e2c7c56bf82b75e55f85f14

    SHA256

    210fe81d49d07fc0858d6583af865ddb8fefcf4162dcb1e7bc2b3ff06443bc79

    SHA512

    777f198b2b94daeed5610960ee3b93760005d5842f4d912b684128e751a58c2f58983f832cec7963ff6088ab3374764cff0a56d55b22483190b4987dda863e1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbbff1d5898e0308c78f91c8beda0ee4

    SHA1

    d8ee96468134c1ddbaac06d8d7dc141b9ed8984f

    SHA256

    22567685bdff776ea125d4eacdefca7f3a0d243e882303b964a9e8989420b902

    SHA512

    bed9075ad8eb9d5fe71872bb4744cee5633bbb96ba4dafdf74f86b28789c07e9ab9043f6a47f5ccf4f42ccdf37957092aab45f7366feb0ab7db86a91a8b27ad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bd7949a9203e4f79a83fe89cef361c7

    SHA1

    454c0358650c9ca303e85dd2f76f793be26dc4b7

    SHA256

    f35a5d61206573a9dc8eb2f1a1ba44b0bfc6133919a6345e0aa3c2e90ce9dbcd

    SHA512

    606c052d840d44053890dc3c14e1c72a8a2b9f57d78da921a48674a2d6eb4bffa24462ae84d099274673d765a09d27451659659d8f3d52444afe3954d5f8834c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27362c756a5de323eb55fa00b8a1e0b6

    SHA1

    cbc23f1cd7d1de0c6457bf31a6e1c75f1d56270a

    SHA256

    643b1cee99e5e093c693f8cd039a8bba9fea07a340fcbb2760f1bade79cd8bf6

    SHA512

    dc1be0b5df7f2d819ec3efe3c55bae55bd0da21336224fb048408b52f0a312793eeb8d4bef6987b1adb928d6804f7cf36cc05d243270412cd0150fe796530710

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd38301e62842bf085df94339c50916e

    SHA1

    19b0dfd00e915efa0830bfad0b44ea993f698306

    SHA256

    2bf2a8701eccceb8f30750a001c1780a69de2a36a8b76f437a283f7f2a3fd90f

    SHA512

    453560aa014eb5df817f48a045d05f0196dd92fa6370a35cc807926cae11ce31638945b5b1e8931bc50b5b268636049ab5762cd28555b7765c3c3b0c0bc655f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61950382048764e028775a6829a842db

    SHA1

    bbb08bbbaad0e6cd0a5d69f8cc4a339c03de5b08

    SHA256

    fc3d0941873471cd6bb4bc3ea1de9c1627d839ea80577cb9907552f85e2c3567

    SHA512

    df053252455d1f4f70369343b6c82e0f22716c5b5d4a3db666b009e2088353de9baf6ee919752a8ec603e7351379b67984f50ce1d9f160a145f8c788e1805785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0918de38de4811dc771266aef28e06fb

    SHA1

    cdfe7006510235558bedb13fb0b272fd674ae108

    SHA256

    cff3576583fd201c787493443d70b37b1cd9d624a34128c9be8772d3815e93a6

    SHA512

    48b95d38276ef33081269384ab81395e7e197f815d1210c188b142ce554bf36a72da683c9446a9e7f457dacc3c0d2739078b5e68b9c14bfa072086aa0202e915

  • C:\Users\Admin\AppData\Local\Temp\CabCD6E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCE1F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b