Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 14:32

General

  • Target

    4061f8c49045cf4840a1f09fb4c66eb8_JaffaCakes118.html

  • Size

    56KB

  • MD5

    4061f8c49045cf4840a1f09fb4c66eb8

  • SHA1

    a022e882a6f09ec4a0ed5e16db2fda3ccb05f5d4

  • SHA256

    abcf36ed01475916d5464b942ca354138797c6f79f7b46f099876c5e087a6ecb

  • SHA512

    57d57ea9ea2db6575a553e168e878e766605980ad5fcba552366b00d562b17d04a090cb07cda51dec4819a403d19450001388bfdb33cb4e38940ead984057328

  • SSDEEP

    1536:gQZBCCOds0IxCaLYCcyXQ4MogbXr4j2QK8BBgG3Vm257b3WMnywPOXxOo/OrEip4:gk2G0IxOCcyXQ4MogbXr4j2QKqBgG3Vk

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4061f8c49045cf4840a1f09fb4c66eb8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2856 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8157749752a0d1698dff537dae54a795

    SHA1

    18fedf28e32f3c19f2ce68304f8e6f18ebe15785

    SHA256

    83af5ee88154621abf8e11c5f9e2fa901ab7c6ead587bc7464de86572286820d

    SHA512

    c859e0e0465f4555ca046e3cf0a590172bbdeb17ac7e0f7b7469c3aee16ccc20b25c98bbf504d76ead1f485c42c7cb882c38ccd982e9d3fdf1e699ec960cb809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2de6753129e789bf1403ee55fb966ea

    SHA1

    20ecf998e721633f70631461ec752eebf1b7568c

    SHA256

    b4ccaac7fda13ac6e1071ee81e244f87c769139ab542476d5e55f2513c798a0b

    SHA512

    0be0d476a08fb2c67765a99f2cb34534fe6bb98b939722b537a8671b4202c94c0f11412cf75d86df1b0767868505224a1760fdf8f94c87a0affb4c733a767408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50ab27a606122f61ed6f61402e4fdb59

    SHA1

    2a376db3ac196dada6d28849214cf3606244db95

    SHA256

    955983d84c71401dee6cdd7b790790b9d917810df78501e4433c3cae8c1867cd

    SHA512

    d387a46310a1f7600ad2ae53000477ed5630e3a218d5cfb52c71c756e25732115711d0b4f0823ac1bf2e9c0a9f9404d961f110e21dcbccaf6cc1c0b941af4aba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737276230d3ed400876c0a238c66f4aa

    SHA1

    c7a8bc4d3211a27c845baa59f75e3b7bc1cc25b6

    SHA256

    5eb5cfca63c2cf959332e814396f41b28942c6364869ec605f7d5aa6a08b1b2f

    SHA512

    3731a96e9667823e55fc9d061573cee287d0cd4533c5db7b7ffe7d5175734d353f267f696b8c3c76b13d09f10f65d42b5959ad503fe13adeab38fc8f5e0e555b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b5524d14f0d137272b107a16358115

    SHA1

    b327c1a1b0d5a99a6d8ee8214abc7536abbbd1cd

    SHA256

    f189d31b83938ac8d30a76d85002c425895cfc3428b52265880ae32fe9b01faf

    SHA512

    963d3576dd65f3c1870a3c0d2e7471bb35fd83a3a9153b586513d82bb63be4d4bd5dfe0f3cd88add5fe171facc209a842f9b98e866c66ed8320024221396a84f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa766f95b36b86c844efaa20052b3feb

    SHA1

    ef666ca5ab60580199d862c4d317538ed6ff1334

    SHA256

    feeaa6dcc4f4079938449872befa4ce7761c62e9394884a2543ea73388a37616

    SHA512

    86ed71ae1a1df714ee4ceb8c7842905c3463aa1f3e7462c22fe1fcf2c748d53b0d3e6c35da126333df8247abc4aa8e9b1d7a858f49e6c1e6742f3a2839e67a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de8bc6a45b7b6b0cf6cf926634f86a6d

    SHA1

    3c119af04488a6508772c4fbd9c12b774d0fbde7

    SHA256

    0609b675c3b639404c5b1e2b7e7bdda6234f2246ea879ded0baf4892470db4e4

    SHA512

    b064004a2af65588b8ef5f6d318e4a601d37cf5d1fe1b87080f7ba03a84655b0490d9b2bec036cf70925bbfeb3515de29e99ed851fbf76e6e4e471662e1646e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43094e761977c7065a0baec228ad3025

    SHA1

    192991d1eeee3a5c4984d05523f844dade032816

    SHA256

    17af4824d5c9376bd916c0b6934a38cac54190f4269e40cb18183009365f29b7

    SHA512

    49186836175217593f3772ddc581b691802e4df072cfec1f23fdfb96daf6b542d90e34e9d7c0df354693085449902c159df2e6960e2f4e98f37d919302c592c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18cd36780300897326789b63001878fc

    SHA1

    99c6c91e2ffff55230da2e9702a124fce06c8860

    SHA256

    0b7b2db6716c288db3240aa200bf5e43998d0d13ef9eeacefc17e550f88df300

    SHA512

    eb3ffcaf1eda7572951d4ec524f815168a43816f6af9882d419f3580fc7a8e7f489b0bb340244d12784dafe6fbcbf609b9538488c823ca8a75364053e2711563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f52b5295947897ff44be5f8220cdbfe

    SHA1

    b2cd3185d0d2263823ab80bd7dcbce1a9583145f

    SHA256

    5e7a4caeee20ff53a8338313f742a78f5f79ed27281156c43d979894c4f249a1

    SHA512

    7bb2001ce33a4f5ecd6030054ca30cadb33d834d60622066266abedab20038f2db2480e9926da3e4a1b486e560ef82dc2dc6ae485c1d9d89f66717b7a23025c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09f8248782b4a2b0930604284c2dd2aa

    SHA1

    7c42b533f2432598972ab10aa76b735ac531a4d4

    SHA256

    559d07e6da5a92575810bb7d7dd41c46365b2b6c240ae0e12404bdeea3529450

    SHA512

    c0e763c459a127e72111091c3bbf0b030c41761ad01261d134f4c989e776c27df8ba3a8229e7216522f6c7c874439fda8bd761564205f298c1dda78100be37e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    649a3862133778669caf7e965a7bd78c

    SHA1

    bc69a1b12c24cf6060d0123d06076389260a0e77

    SHA256

    5ee91180aec1a8a79d11387297132ac3d808891ff715ef397b89c992170f6ce3

    SHA512

    181b33bb29e8bf11fbfc6ce88e6d2b3ef3692772730d8810218c22f6328b67fa020074a8005760aec6c862c4623b0b8bf73c17702fde2683cfb11a85667b22aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90b3c600593439c9b3ffe369ebb35fe4

    SHA1

    b45dfbc6be687b6778c47b7038f96421a28bfcd3

    SHA256

    855774c987bb74038effde8a1e22d0c5e813b227d06534d2faba071f23d6b19b

    SHA512

    8c249ec6251fea343ab180395f54b11899756c3d5627c58f22b3db1f37520ccfb7d217f98b69993c2386d69373a46d25204137adb79dd7078892355766fbb2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d26d532510bd19578ead9b24b1685dd

    SHA1

    9f04285c2d2da9fb0bc4b63a72678597fa4e4534

    SHA256

    2699ad515f44597a5d7b3e73f9565b45e3c4214be74c4e4ad4587708d4e27251

    SHA512

    73b2b216634289e2fe68a4e89324eaf16dc231eb715012650e7e2c1454a9987b8694fde57298ea780f9e24c74b2ab4bf0a38a6286cddaef150b7d9939107e9d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    033d51afe44991473efc3bbc793b1762

    SHA1

    5f4878ea0bbd50444fc8e4cbe0a4603c18abaef5

    SHA256

    0a131faf9f715b0114689c8f59874437c93eca486d96caf275c7e7deeb864493

    SHA512

    66f50e39cf295ad59d236a60db05f75e3cae5e779c28f0eab8f649bf6e451e32066027364523bd70d377023c6dfb9d6bf15a1fd6012bd8db8a438aebc40f19e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b841a26d4a6258a6641ce848b4f68c7c

    SHA1

    0789068f832ad1a990cd276e42f2f4b57b64f685

    SHA256

    1779e688eee5fcd753ecaa8c5ff85c01ccbf42c5ab3e7eda58d3138a74d48e9b

    SHA512

    aeeaf6cea9b44f5ad0167ffae371f8479d0857feb558951b984aa296c3d06d4fd62351a18864300c9b06b2c12fd8dbf35861e9cc53c693546fc20f3faac0bbaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3eb5ab3f81f0f380a0230099b2807a01

    SHA1

    a8f40dee2541d3aba148790e8bdc05bdd0781717

    SHA256

    47799ca18003feae2be0871c423afb78cf9e25fd6224ecca85c196cd9bb4c91a

    SHA512

    b3d2e55772598b46cdfc6fa65a0b4cc96a6126e98478407829837bf9a48707d2c8e2c2c64613b7fd7e849652aa4f9f7dc8272e15b8ac056302e7c130eaef407b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ea9cc3d3ff38e0eb7b2941aa5c419bf

    SHA1

    0d6abbacdfe2bf4b6bc618df622b95cae038e469

    SHA256

    12c387d37ad6b4f5011e8cca030e811b2fafffc60e40bbb3d38a5b673fe2076a

    SHA512

    8143268b5bbc5771a185a8ad7766019f8ae28aa3e2d5f03c6a407f81704e86a7be49520d1ab8ee8c0885855dd98ac3061f874622e98e1b9ad7ae68ec2791d1cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ce4cff8991992c6580fdfb256b9ab30

    SHA1

    f275781a9b1107f0f364d86f39f624d600989077

    SHA256

    68b421ed04fd7b0237485b57ce9d9f95f394a9ec92be5681c3b4d84ec176e0b8

    SHA512

    10712c547eab2969c8d2a61f00e08ad133ef8894a3affda246c47ae6822f4ac39b26ddcc320433eb1eb7e775fd1d34c7206d55cda8fa40c816054b8122d54d81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5737f32915195f22b9bfd2e843ab1dfd

    SHA1

    b407d1bac5307f85517d3c0da252012bd4ea66bd

    SHA256

    742785b3be73f21e30035ba1d5f305ecefc5511fb7fb6ed739316ad71674d968

    SHA512

    c6e2b99d73097bba98d0dbfcd629d713ab731210cbf90373a4f0d10e67f224cb9e0da6b6c1d2e093c2d8a1cee80cfab1a2d897fc71d4ebb846087ea1b289535f

  • C:\Users\Admin\AppData\Local\Temp\Cab9DD6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9DD9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b