Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 15:44

General

  • Target

    42ed74f0df7c0406d93df5b99fe67727_JaffaCakes118.html

  • Size

    23KB

  • MD5

    42ed74f0df7c0406d93df5b99fe67727

  • SHA1

    f0a2d9e5cec616ae73dcb731c14cbd17912bf5fe

  • SHA256

    7c2583689611d56b47481dd821a00528228b92dae6aa1ebca02d6546c4c28049

  • SHA512

    b6b310a391c0031721619fde8fafd048b693b770170603093ae2d424fd812fc92d2ee3419a071520c3eee71394ff446b7d6f1a2219eeb11267186efab19d9f23

  • SSDEEP

    384:3M/YMmqkPdn4xDmHxzL0ys1rG2CItb9ygKGevwhEctI58aetGQ/a2Yo:3cYg24xtgvs/6i7j

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42ed74f0df7c0406d93df5b99fe67727_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6cd5fbe92e3e876266e7b025b0c3469

    SHA1

    09b7dc28a00b17e5140e78563321fa573fe326e6

    SHA256

    816a635367c02d056fb0572f2c9b7201344b1b9cdb0f4e9266ce73823c4f0f5c

    SHA512

    6a5fce42c9e2d194012d3d1e6ee9d3f50852be386cbae3a656b34a06ee66e93ef072ba36a634621c4328aa8ee6bdafb4941347bea6f662e03327da637d13aac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eedc4686fb90966dd90e0d137afc1995

    SHA1

    a18cb066172c5e262123869fc40073caf7027e6c

    SHA256

    e72802b11f0c2b7b2532592654c5d20f907c0260667d8da395956242955ba0ea

    SHA512

    17b92e45f8ca23d39a10b6529c9a350b60a19f32901f181ffe2755e8c7291f1cddb0e7473150c39cc6f607d8bb01b22b1a57201a937340679a85bba07172326a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    679bc4813f430591f013dfe85f6ce4de

    SHA1

    8f6835b2633c12c14a14798cf6c19128fb5538c9

    SHA256

    c144ee09d8bdc20756087606f561778d30001df8f8f8b4779c41e73d8d2cee86

    SHA512

    f5339ff8951c7b7bb94813a24aedebf600107ac18085d8f8f9ff7747a748829c997cdd0bec79199b4d08e7954c9f385b39d2288a835f5f62e3a10e0333027e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d816993168f7fe322f97b5480870534f

    SHA1

    c1f032aa17ebf4c55c9aa72b306cebb36c468d44

    SHA256

    692d770fcb3dc75a2ec30e7495934bef631e5963c21c34385caa4cd28353649c

    SHA512

    98dfd40fb73efd6ab0821cbf9e198325b0a130b9feb42447e0c6561b0abdfb200aed640ca7588d25124d7a8d77815620c49baa55bf5d8097011657106d04ba68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b636aab520aa87495f427c5d9379e53

    SHA1

    d0dc5bac19a10023cfb2f423c36c050a1ef3a627

    SHA256

    d5ebeaf388e42413aef726643b8f55b3409171910020ec9894ad00161022919d

    SHA512

    d439aae4c2494c8cc504f4871df18ed7ac66613c4c1462f9f099e7dd8130d73e72b183c5f17cb75a0c4ade10ee7180a09e6486b3f94dccdb78bd8a8e7502845d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62e72a84d8fe35f20f69dcc39d78ffb7

    SHA1

    f9997d2d8476f7ec90ee117889e8a916ddb9a9a8

    SHA256

    f9b3557511712c2c026fa124943dfae2ae809611128f2de821a6c8faa9d903f0

    SHA512

    50d3a0b8b78463e027c51a3c1c43bbfe93f9175f3a209227ad8f0ca82071ff4d977ccb758714347b166db50c0a9a02ab5de611737e979ee83fa4035cbdebe14d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e96d3a458b60777a0b1dff5815d718e

    SHA1

    80085be60895549c3fc2366b38ad5af2346cd15e

    SHA256

    6e2b879eb53db84e8a2e38937988f2395a88183dd0fad63a64522e03ce861242

    SHA512

    183cefa56b12c826efb8c1c528e5aef1efb9075ab35fccb713d08a2ef5a8d8a338d110c82a2ad55693c4b4b91b920a7cf8a9df63f32c62d0ce9e4d50b15e28bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0881b3da93a3eca08eb094111f5cd6d7

    SHA1

    2b6240694813ea6c5e5f9a8d4e5a6196d2c8da1a

    SHA256

    ff2fcb61941fbd82d6e7b99343a88c9df1b19584b1314d7f8d8de8bbc33bb275

    SHA512

    164e90d0bbf6d57961a148524b2f5b35b9d7921234cfa2b77145a47a5186710f56f20049c00db1162b623c91357151ffe58478e3e7c57a952f42e9165ffe2a69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3472c4507c9a06c08c30b2be86c697e1

    SHA1

    47a2116793ffb075c79635be6f85022ecd758ef0

    SHA256

    d8c4b0bf5cc707f430fc782991ebb5ecaa99f99364c7d555b0c670d2f291455b

    SHA512

    2be06bb61bebf3d8e027bf9216d231ef557e98347205778a14afd0f26ea8859de69f427f6db87aa4c432ce22ee3fb9f050b9d1a411a57840127150696e4f470d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd2de40a4b9efb4f98cb137e9e4be744

    SHA1

    0f6d0bd4a8334f3258d2dd773240fca1c43cbc8c

    SHA256

    36b233556c1625951cf78e117c3399cb026e3656ca68868d1578b33b5cd33661

    SHA512

    682d29020f628f6503d4ad171fb592ea86ae92a8c02605b0495b6e0451dc7e1b74618bd745b12ba86abdfafed36ed0f84c461b34d595b7da6f29ba17bf321ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6061308bd6c937575aacdc015a159f0d

    SHA1

    3fa6e0487900896bfc895f6096329d4d53e606bc

    SHA256

    dcaf1ab0fd2da96d15c87fb5781b840f79a836227a88fa7b8b77fe8cd28d903b

    SHA512

    23d5ee899a12de826344884a4ff04c8d1243f7a66561180037f2753b997204263aec8e292b94d33192431fcaed2547b7123ea4d20dc83e063dbad61a6bd7fefe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3444f42829c4c85b6a6600b5f6feed43

    SHA1

    4f4e83a1d3220fca81c8444cd0f11c0c5208d34e

    SHA256

    4467279838a59ec61cd0f1fa445ee947ca0ea5a7d5a76d5f9d92547b283bb858

    SHA512

    56d596766db5f895fd89bc03fd590651fe9abae64f2feb8904a58fa94ed24b36fa7d536f655b69b653bee73513173f4a6300fcb73fa392abb15cca6122df9875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1818b350b204bfa340ba294b0bf6b664

    SHA1

    c3cbc9cadb5c56114247d4e1237fbaf9a5bd6917

    SHA256

    8cff2ad1f17571875b796c0bb2df50f12bb029e154abc9ec071bed2003905be6

    SHA512

    4c01a62700c275d95d77d31b0cdba1ae6ffb5b0a35898929641bc7bf04336d277cb89fd50f419777137b37deb2a2bebe8325fc08237bffff1ce8ca7addce03b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d1b2df95fe5aa1419aea6b3d1d79ce7

    SHA1

    b0251f1e843664bde9d488b7c63ab7702fad3f85

    SHA256

    a76098357d9911a064d0581df17320cd4dbc463bf8b8871351af56bc1290e1f7

    SHA512

    0fde112ba63b328f66e00eedd9d46746783f2503e961d265102a28b1b088b88560a6b5c34d04776c757e138d8c62bcc30eab9bc2410b77064f98c4f7e3b73ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    335e6d43987526cc8200fbbf6f053695

    SHA1

    72fc2ab5b33ad9b3610c448732681ce064e7c01a

    SHA256

    217a2f5daad6decc36d27fb6d527217254cab8c743ec15e61a62d835dea25960

    SHA512

    65d542cb6bec895d00771b8878b73b96e7e8fa18d16af131e5aa39e6b5b8ced95f62ff90ea0c571eed4cf3e5b90d4c68dd788671433dd920418ca00d2be77aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    715923c35fe392a8a372ccddf1f5ca1d

    SHA1

    cfd9c05ef6f743900f239a61e8dd4b314fdd7baf

    SHA256

    20f3d3eb0aa08b0ab8e9bf953aa9ac545871e63d3fa28d06300f0d31c8d871a6

    SHA512

    65f30f86f6163e41630323be235a08710b5339f45b8198a801201fbb150e5af161f841a61cddf4d772070871ae613e9f754a7d0fac15771a70076740ac12df4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    862af0d17189040fa8eed3f7e55b6c7c

    SHA1

    e93da5210f47104b3e71f673656e4d55dfab87ab

    SHA256

    a344203a7c72f742f281a5c45a516570fdf23c582f780f8a1b1bace301077b78

    SHA512

    8524efd34c33d8e0236a5fad7c93da444f4048c05484e4d94273c02d655557bdb9341f9c7cfd536ce6e003708b2e1df227b3c13aa09b06c7088db5a4c214e19a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    979bc7d613241ae047fc92b0eb8e5c67

    SHA1

    6f5e4fec469dc4cb30e0b9fbe2cf46a7d5a1b1e6

    SHA256

    fdac20a18843e57a65798401a8442085a4d1250822653ea29b8ad880c7e5c78d

    SHA512

    45672b48407c6f4d868be6d238892482a6952827be6b75f385d2c220c9fb3122735c868949fc6afe20dc062fb8ff965ef505c9516edd1b144d7e763ec2923251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54bb758143f552651ee399c8dd797f11

    SHA1

    3b30fb21761304fad28c61abb58ef85a9175bd34

    SHA256

    5c90eaabb70a895b85c6f622f7b68d4161f291bb43be97077ef27e2f91c7c21a

    SHA512

    d4967ab248d06dafb230fae9cdeffe4af04a1f91648ff7ce8e2ab32aa33a41236b978483856ed970a0af6b55c21107104b1e6f4c4fcca9de1579d11d145cde15

  • C:\Users\Admin\AppData\Local\Temp\Cab2204.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2265.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b