Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 13:45

General

  • Target

    3a5650b05236a202df50b4128caff3e3_JaffaCakes118.html

  • Size

    226KB

  • MD5

    3a5650b05236a202df50b4128caff3e3

  • SHA1

    b1ed1e4c134ac04b3b8b179ca7880156366c78fe

  • SHA256

    a1800455fd921ee36e819503e8da6e04c4fe7110244b7fc70c5a58b05a99f1f0

  • SHA512

    1d5f837c7ee68c5f7602a55e37c36dce69510db6443ad1cdfe7876d7fe558a057097879ef1c71a6850bbd162f394c080633ab135d4333af04b377d4497d1951f

  • SSDEEP

    3072:SZMyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:SZxsMYod+X3oI+YLsMYod+X3oI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a5650b05236a202df50b4128caff3e3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2376
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2376 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f39477c81ac72e96579ba52733233ab1

    SHA1

    2ee777cc492bafb6cb0101600d4fe7dd96f186f3

    SHA256

    60b15a4c9805f8dd84ac58b15fc40d12c12a13b51214273e2a1b00d7768596bf

    SHA512

    8a37cd4ee01cfc532dfddf1cc80a6771ea3fade38cdf19fe8a5329707fd0e4e767f45437fd4245e719053be0bc05dde9a1f76b221eb65c4f38a94ab86cee2a3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    536278314a4e18fb461b51f4524e4124

    SHA1

    8ec3dfc1c03be237ac22c043b6c47b670c6d223b

    SHA256

    2a740ee5e2e67a7ca52532a0f368b8872204006fc0a7ef5948990b18c0120cf5

    SHA512

    bcc78e3a48dab5a5f9df50926f12f02f3b27b364cc4606e53e3e0a627f5751230ec79bfe0e55051cd5d7cb87dbd90148cc1734611735cf2b846d553d1ae28800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5991b1677c8556ac2bb3a7d82a6606b5

    SHA1

    d368c0edab7e1b06c74bfdc342c3ef0dc5537f8e

    SHA256

    e568ab96c00449458f33ccd0c2ded331583291845814c6d5f0d181a45034596a

    SHA512

    e0f95f03dd7489cc0e871c8b566fc204660882d25898c2d006c5dc01072436614372c96cb3c55a0a2012251554e39ef4a3aafa4ae54216b97b6c770484159fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a7db767eef0a90b0a1e1bf5e97e40bb

    SHA1

    edf7def3b4acf498283b8ee14bf03bf2ee09ceac

    SHA256

    792f2cefe4262c7e6226b52ac9be3db37c6a1664b8e53667b030bc15c4188bdf

    SHA512

    226d149bf25c46b6cc9af929f24b900a063320a2137bbf6ac5f0e31a33560ef0d3a9eee434b6928be29ba84c2df14edf5b5029d7da5c60ae2715f4717268c5df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88783e8d010318bdb0b6cc61dd4539d8

    SHA1

    6c8d3fa9662e4adfc10e4389281f69391c7582d3

    SHA256

    3bcf80a41f4e4cfe4651ba504b00cce8efda59b94dea9ebfaded0576e2c268d3

    SHA512

    0f3849a9a18cffd4bb71bbdc5bb35030393d8493b5e6d094fec79d276c3932ac5291ae08c96e62056c4f4fc199f84cf12c50af42e84f44e7b926e8a9857ee83d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b113d4075f86c8e2358a8b002d6ef3

    SHA1

    951a60f5c4093203cfc69edaacb0d082482424f3

    SHA256

    7adc64f30f13b1664f70d6a7ff2ccf73ca8dbf740930fea40abbd41665d7cbb3

    SHA512

    233929c3572e7549893a0ded3d90decd50305e0072e297438a51a5b75a6af92e718d5877dc33948c56412380a5a345ce706a5202d63bd38efc5db121561b239f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce1667673a7554164710c755a5b057c3

    SHA1

    f5f41f48a0e52bd3aab09ac8a31d30333c5858ee

    SHA256

    410a9bbc379c5b2c9da121b3826013c3d4d34add71d2e9c5c0c11dac2d364ae2

    SHA512

    9ccb4d5cb4e598ed8dc3effc73bbdf52d6388262faff388dc3bd51019e1ee4bc3c31f0f42ba8f35a139ba6c67bec9ecdf370b996f750c1e8c110e689742e57e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63daace442c8753eb4a9e99060bb4013

    SHA1

    f295ef001be7e5fde067659ff0df1f0d8258bc5d

    SHA256

    e2661aae208789b111107e58aec79fa98709bea50235478300c8e3b0cce4beff

    SHA512

    2b12ca4c604957b6bf802325aeda29ed4b5772af11d1ed966e0e56d910358b11e7dfb9ae7db712117c17d2a11eb84bc809adee03ec3da980fa99ba56c262ffa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04defbb285a3a594d2450d7ee82fca87

    SHA1

    afd1b6a0075004dc6ce27e269a21a372cc4374d7

    SHA256

    e4076f6659c9af17e3cfbf1c17a96975b46c7441654a6a02e8f7b55819b473f7

    SHA512

    fc10aa2eb6e3a006ab8c5e6aec8a05090e289bf1c6f2e3ff857885893cdc82228e85bc71fd472e13ce6e4819b1244dd84503b9801dccc9052fed0a88c736fea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15bfcdc705590b31b0a4d4a043bc9da2

    SHA1

    3cfbfb295916ef7ef264883b48b2d3a07d6377bd

    SHA256

    d025b0896c7709534eed409871863b950a552977e356e789b5d916dd90287dc1

    SHA512

    6923b954a36191bd5d2a22c6f07eaa767b6bf17912e1145b3f42725882d42c29d5992fa9f207727d5541abeee5f36211bfd6cda12632fe80dd5121c625118c89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7e47a960b10225ff73320df2babffeb

    SHA1

    d9b6f4466c2f1e67b93fa0fff350d9c32927c4d6

    SHA256

    656e7709066b331c00e4476d7f96188b73eeb4422e49d3f94bf41a0bd5fe4899

    SHA512

    2eada42aca1f2d8a7d9f0fb7c52d1066ff7b3a5f39611779f821a83e26a475080f400e21f77ffa36b54ef5550dcbda96501e347ab5b5ee690820ddc89f6619dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d95320543420fb996d15c71017c34da6

    SHA1

    698e27e7888d13069db06d3819058c5a9ec3ff4d

    SHA256

    1cd6ac88cb8c222f048ba137f90c0f66ce29a0601edfbd8f3c3683f3b1af347a

    SHA512

    5879ec8b66409bd5c46ecd93f598f90bf6b2eac666b92ffc29b2a4d024672a6eb132bcb6acca09a39cee1227b77fe663018afc3b5882e4be50a2a5d27ec303cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    340f7236f1799051f35a131581e2e534

    SHA1

    98aebc2163cee787db75a69e5d2ec73098720e19

    SHA256

    255a0c8562ea7890d8d42939ff38360ce1c62ec4a12c46542def0f4cdd4866bc

    SHA512

    55dd9c933ec8c910c4b454376f09c126eb1a7538227362bdc1674280486731abdc6e5dc922feebcfd809636716ba174a802b028c6e6f4a4bf7798a1e3f86c4c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a58fc57db0fae8f0a79dff16f8dd5f59

    SHA1

    0fc5271fc92f8ed07ca5cf39bab37821df5dca1d

    SHA256

    15313f964a19a0f1b1b6b6579af9ee2034e4142b9773cc283bae4309b6f9e5e9

    SHA512

    b4e9f93c894fda9b788701d9b8c55004ea2a29eb99572ab08fe4bd3dafd05ba6550ae43da40bfc5382767d200aadce68358fc03f3171d9fb5818e45521a1da9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4e6f02326fcc0a20d7a89ae482a012e

    SHA1

    465264661311ee8088325cfeeb5c63512dcb092f

    SHA256

    44f54ccd7c16d69d4756a1ee896139bcdccbfa2cff297a85f59c6fd35ebc9172

    SHA512

    dea6f63009cb574c91dee0a163dd9c62713df44c9c8cad920bd8cc324739c5f9a92d9f4a3daec5bf742084b795ed20a02deae33077bf8623afe302ab43b0400c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd35e554e1690c1f1a973a4a8f6f07d7

    SHA1

    5733b34ebfd2303ccf1a12a3ac55f79a744bd3e6

    SHA256

    bf056d32cee3988eb67f8b5ab880104cf654b4892a2bb4758d0cc8d88c7dece0

    SHA512

    c64f09db22d4f3630185992caab2d5f6df14233b1e1745fbbf5877c6c2967b81e7c298d041413babfc7a4106e49e21d848268630e5e158536b500cf58a276ec2

  • C:\Users\Admin\AppData\Local\Temp\CabEF61.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEF93.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b