Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 17:09

General

  • Target

    4345863a33b92ce5a387fb82d22cb97b_JaffaCakes118.html

  • Size

    41KB

  • MD5

    4345863a33b92ce5a387fb82d22cb97b

  • SHA1

    d905e254626a0e1250ccd2c05aed2b84e20f8915

  • SHA256

    b354d0d48f27eba74a1b2f8f9e86a467300b07d1b31b345d300d526e62769dc6

  • SHA512

    6fae10d54f7fe7b1bdea26375397c6570489a03b083c0f8a207b588b7a0302758025160bea47b9bb0bf4baf73f3067e7da8e4264f12a22a5e2ee5168e4d7f5fe

  • SSDEEP

    384:BhCy9ttRUQW6h+22cJD9CAjCRgYxEV+XqBqcecyF/h/:BhiPH2BqjTF/d

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4345863a33b92ce5a387fb82d22cb97b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ad0679365129cf1d7a40fd0618b9c7b

    SHA1

    8c3a36b5d2fdf8ec89fcc26b22f78b4ede6f5d0b

    SHA256

    b3ec8ece0c32cc71bd5327bc1d6d6094ae021c8d11a08286a7080a4184ab37a9

    SHA512

    55672bd298ae6131e7c71b9f8e7cad58c5ca11e09cdf0139ddfa60bc4e1d03f5c97b6d71372a097170e2edf783178c89b7e786dd4222811423bd683445057cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65495fc57803b6cb4bfe68956446e745

    SHA1

    832f337b23a0ba2767775b617f2389c22968cfa5

    SHA256

    0e1b3242f659e747bb131d6d78f79114e11b87799894d3850f37669701a8a428

    SHA512

    064c2933bbd0d1ba1cb419a84b1922d8b55afa93514ba9d65a5c1228c533f4d9a8cb7336d62255d00d0c89a4b525b467f64ad94bb9178b76c9f3e458fed86302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06cea6bac8a601b81bf60fb8b9d359be

    SHA1

    128766ca2526d11589c52d18e4edee6236a5f051

    SHA256

    075336ef4cdda3ec49e6c52c667ca8b08df296a62b0c3eb147a559885e464b76

    SHA512

    71381cdc4f3aaaf88a222027e8a625dbc7faeab25602fde3132733396c12faeed1a98396981ae6b532e86c679590e915339bde3ef059e19fc0fc17a6b015f43e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1187a487236b65ad153e63c2c94e2fa4

    SHA1

    eb18eaf4ae6a63382d47e0e0774e640eff6a4242

    SHA256

    8587ec108f690cc550b6df79a21e85e76c05ef65c7b0bf3d376b319138280716

    SHA512

    79d350c364b42645118672f1cfcd121709d3fa9bb9fac8ad679360de95265098c54ed42bc4a1a47b70419670bbdb233df2701d9934e447b8280250ecda932a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9af2f676cfd2d2f4703e252fbb59109b

    SHA1

    b7d4a65c2bbf41185041370d2d4148338ae94ae3

    SHA256

    50850577c0c5522556e3e9bb2a66a1c2ac6350e303181db56471fcee285d9990

    SHA512

    a956996b1da121c71fbbee05b9e8e82ea7cfc7949636eeace8621579b24e8a3b1053dc90bef91349706405dde6f48453bcd37dd565b56c5c825457931ddb5d72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d15c0d0bdc7a849bc0fc081c5fc0281d

    SHA1

    80044c8cd458ba901ac920817dc5554e947a810e

    SHA256

    af3019962b9393686360edbbb462c776ccb4e2a0a35b6afd0c43ff2e18ca7020

    SHA512

    fef068aa6b0b968be46bafe3deecab2ff4deb7367afb4c3bb3147292f2978f3e4b94e479d30495d970651f75bb25324968049ec5ff3b572c6e0f5039c0ae65fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d8065b251cdc400fbf53290eb1fb3c7

    SHA1

    a74daae5d208b656d03490670530ba5979323455

    SHA256

    93c9d6c66f241b99323841a6e72d2264d0efdcffd0e097d5ff646d476c6acd84

    SHA512

    494830bcf03a0d3fb922ba2dede6a64596af4e0d5008c0175c4c7f2f4eb83b6be9fba2529233ff5690f867ac08c69fe6bc52b0b4ed23755f3221095927f595c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dce3f0a552aa4f0505a79387176e7703

    SHA1

    123ae72e3cce203d6b66176cc29af8065abec8ae

    SHA256

    d57ce2df5b591d7bb648d7e945ecc2d86f05e3da7f95c934a6ca265ccd5fac38

    SHA512

    fb7a58c9dbfae851ef84e74dd54fd1a7301aef5f608310ed0f9279ae6bb7f3314a023b2aae41145080dafd72624c1bf5540118d91299fa88d45ee1ab518eb809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d355c85143f1e17c21fe7917944394b5

    SHA1

    b00c62313e99ed65d88eac125b9fe5ccd6b40dcc

    SHA256

    92f2cec5b7119903c3eb62c20eea31b5a0ca8374ce66ba484ec723d13748f208

    SHA512

    68b5b38dba8bb8e658db957b5b8dc5b0933309cfd7263247f581ebc7582634ab2cdc9a0c63e64283cc4b4659406ddb69e3522676f718928f2bc08a9f6b0e707c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ba07607ba28763313c7b555c69c48b3

    SHA1

    bfab2a53518bb720eced892ef2913aa3eb0cfd23

    SHA256

    58f9c2ddcf12517df2e3ba0625f2330f12482d4707dc133588b6424a331db3e3

    SHA512

    d1a576e99fd23865289939d2bfbbd4e9e8fc0cc6ea82a9e7088ae1e9afb2efe9a09b3d3d5d015f82406f21383487c134e6ba5eb26a2f11ca27770053d840f09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e96bc98d72623b33079026d879a2cf88

    SHA1

    5b0504456b76f9d13914b8d6f9a2003bb69569e2

    SHA256

    62dc340809fd681548877517b4e20de84e52c01841e0f3e61923efe7c387dd74

    SHA512

    4f02673bd4ec0a9c9fad435ec594d1804e6a2e683baac65563eabdd97bd0e8a6ba64d85648e543fd18206c76da9cdc2e1b0b37bd2bcd2b00b54ccf1ee205d10d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b22692c48c81dc54d46b627af47d1d3a

    SHA1

    814640e9fdd2bf78ac4485345ce783d49bae53e0

    SHA256

    7d44d8030b82ea3417a44ab4a42acafa9f56e82f1a7e26eba297848e3121fa7a

    SHA512

    ab0feebe993c6cbadcecccbb3fbb226fba1e05cbce3b3a3e6817032f90f4ab26a9c961b48a6e22c377755be5fdc46783f4360728cc42e2d25f5d92ed1b934240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c2c290e6cf730b7fe39b62c8e3ea3e6

    SHA1

    4ac6ecec7b2cb2a10cc6ac08ed9d6f0f8b554753

    SHA256

    e65056ee218c1377b8bce0ee4b8e821c5e8934ceb046b339b8f519fe21506224

    SHA512

    e23121538dac8408cf4704e5f7d59fff4df188bf20b693b7c59b1963e7e2dd97952e23735fb7af3f5bcadb3ff442cf3b8aebd0f7bf262780145afe149e5f7576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bde3f07faa88b5b29317564307dc8e9

    SHA1

    6fc54795268518b18356463bcdd05c71ced51b47

    SHA256

    46c69487d89051431c5dd02f914e83e17c3da741659b079a666877229b675f5e

    SHA512

    aac1ac984762f03f3c03b52d8a2449a6c4ae58c2696669ba746023d37e4f23bb3f6be6bdd695c1b8d5f2c64ab243d3a73b666733826b8958ceed1e301358fd78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cb6d59a2a1bcb75192d8a2c3e760091

    SHA1

    a1664ad51288bcb1f495e12d21b083e831aea4f2

    SHA256

    eb4f607a98fbc2c68f8093c37dcc4eebb9ee2b5f2f24555e41886eaf9a27539d

    SHA512

    45a62f9d554c66c276f461e6d4514b6d015e21740c6e9bbd14d26693d968e0490ee70a46712135ff1afcd172d8409e55976b8dedd49265704ca5504425a8e0c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4919c2d11267bc4960237aec16bc857

    SHA1

    6ee2e6e5f823733d5d456fa6de40ca5e8e469f74

    SHA256

    4c0c314e5fbc9f8e8dccf3b02c7d2e87cd230797aaad3db54145b14e82af70fd

    SHA512

    dcb4b378ef665bccb9945c57b048677828d40c3633cd528c0f632f7fd8485a0ae80c39ea96c168ccbaebe4d8eb006eb81c3899232b05252051c5e296ec2f52f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f0c161052bee5bdc1f6e68d6f5ebc87

    SHA1

    8fedc71cad4a394da55e0ef99508a002555bbd32

    SHA256

    dee921de21d82fd1e9cc22892bbac2f960c8b48296201569458aafee58222edf

    SHA512

    67df29953001345f26a72d709cb76329420563b7186baba6115bc45ea90e2e6342e51e1c685b2d59c1e15103c4bc130da9b0bda50d71c7023e16f5e66b8ae6e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    422b1854528440d4abe1e21965c94593

    SHA1

    bde65c84dd50d751011c157079047e0f668d9e81

    SHA256

    3ed7a54f6b921da4a3ca018ccc2735d31ef4f940a46239a7046c64a4432a4d3a

    SHA512

    513b38a12dde1ad627e4047c97dfaf03ab8564aff0d34ad067b79ba88ba9ffb8976b3e873e88567b4fd5b00995a6a70290a528a2a181489601d96f4a93efff7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b535b7dee8b99495f74e45d8c091d38

    SHA1

    f92fb655631909d7628e36e43d9e76f2ff298fbc

    SHA256

    9831c4ad5452a411839f27fe3c698d14cb0f2a2dd1647b9fefc85bf62fab19c4

    SHA512

    7ff5f34a6f13aeba4be5a795548545b4caa60138e575d81152e0ab7584c9701f5e8cc50542158fbf749a96b64f2c54c3331982f73385e91960a68faba0e3fbe0

  • C:\Users\Admin\AppData\Local\Temp\Cab15B3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1635.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b