Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 07:36

General

  • Target

    46844d59fc2ad3a74dd5c51e7c9c2ebd_JaffaCakes118.html

  • Size

    7KB

  • MD5

    46844d59fc2ad3a74dd5c51e7c9c2ebd

  • SHA1

    49b4ebd41ccabf195759ec602105843b841cf96b

  • SHA256

    03495a9e6109690109012e783054ddd9793c80c691316cf739aaad5de3076860

  • SHA512

    c69f0b97e1154192b203f3696247ee962d40b8923bca4109eaaa8ae2fab7defa61d4ebbc8324e03a6706ebea0fa0bf5887c5a083fa26dd251ee42f7a02e8bd4c

  • SSDEEP

    192:Yagkw7t7XbfnpGJ8sbtAVhn+TdurffkOuzKK6sw5aZvTCeKw4:LcDb/48Nf+durn3sw5aZv14

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\46844d59fc2ad3a74dd5c51e7c9c2ebd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b74d1b927411b0e5f1c11acd6ca712f8

    SHA1

    17efee5b19c244bd10ca095adb7cc211775569ad

    SHA256

    1930658cc4493590f18e3e3e02294d07dd0230cbd138004a6fe2d0a57aa640d5

    SHA512

    964e7d1d4b0f7b1d20992df0a974626ab5876cf429f08bfb0bce2e33124b386e98cf4614dc52c692ff8a5d112fb5e62360c7cf609c0aa7005e1dd78ca665649f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a39d111ca8e6433bfbd94d6a8e9bf285

    SHA1

    fe3d888db09ff1857cea0c7ca19a0ee6483004aa

    SHA256

    4dbdfc826f6a0a6e0b7b7606b5f9f31b7cf07de7b2b945c9a0ca9094fe9775cf

    SHA512

    7400fd3491d6ae2ad319aa506deeb1cae4eb7eaf8e73dd4f886140f798060d3627d28be072ac0e2e95c737f8469ecbd6b4fb163cd31ff4abde881a032941278d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c28bdf48a87b1371b6f312070cf6bae

    SHA1

    9f9034f8b8b3e7e84a34d2ff73e748b20dea970e

    SHA256

    e53f2a49f9fbfb6962604f902e673f8a0a7ece1af214379c3e548f4855e07ee3

    SHA512

    fd273e5dd392267499f25f3f8931ccddc971c56e386ba47d23eabaf9c21f37059c6ebfa29cd818c6bb8aca28122bf35e68c70b09d70ff36e162a9de79e91000e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eee523af3963cdf77981efc40f2b92c4

    SHA1

    9fa869731313fbb361c675ff260c9749aa54fc33

    SHA256

    077c378bd73d710ee6d08f07fea8254389fa4498a9171072da6e577bd8376bba

    SHA512

    471bc7f110d0ec2b6167064f0d4e3ed838d9bf62888ca18e8db303cb798faabede38618f95aaf44f2e4614d12fb363ce7f5e48c44880303e81ec2b31770e3089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b138df111852132c9954f2b0a8a84b5

    SHA1

    012013148b0fb57db50fa107ba5e05bdcef1e769

    SHA256

    3b2e48761dbf7d36860dce1b89ffbc9fd10c3e670b0f634ac8470f7a3b3ef35b

    SHA512

    bd99da718b358a158f36b257885c187d54c1779e4855e2b9214a3002085eab0dda679c6c4ec33132d66e2d85e1cf201894da79bf57582cefc40a87ae24daa244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abbf6e71da8df8ef366c94710a4d7df4

    SHA1

    536a08937d212b16b0063e8892e897e7417104b0

    SHA256

    13e6695d68d41d3dfbd19424436958ab49898060375bbe011701e68e3ee1f983

    SHA512

    05a1cae995d3082a356e87417709f800136cbfee15b81758182af1a238c4fd740b9c3c5081a63141efab7e76c5abfc88ee5fdc8592c0791d4bc29aff7e34b9e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    526f8fceafa5295bee997a573c15dede

    SHA1

    50c2641293448d0a08aeca849dc3c59bddf982f0

    SHA256

    9b7c3be757c2a49348cd4fecdfbdad6ef9d6ef7f82b2558930d2aadd39528801

    SHA512

    70454ce0b46eea308bcf0a3f31ac835c8299b29d2e7c1f7506c30d727a4791cff558ab7e771c1fa274108d749448498b72273f5e1c7fb664d1dce509f9c174a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a9585cc054ed83c5d965ae64f1fdd16

    SHA1

    7e859fdb2e7deaf21a7e610805d7cd0be56fd4f6

    SHA256

    d2ea714cfb575f63c6f9b08a925c79c1580b937ad041272263c3bcbc78b74403

    SHA512

    9bbec2c16d2d9ccac3cf4a3e0776b3ec32d91c5cd240ae5c0d5d9337db784d44e659aaa72b4e692dd6470f65d1e40667c53f9876e8b45670e2e6b7c6e61768c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f0ab351a339f33296a7283961261a99

    SHA1

    5f5b8c476beb8fc2e45553895310d5fa96613dfc

    SHA256

    2645f48e7853bb134887990f8459fca496bb2255948d93f07ec8cffd0c7a742f

    SHA512

    50c34a822f8a155888eb63e8a3d80152735a3530e58a6beab40cd38f48637714005f48ce7f6ad85eb5f69fa3277be77c77cf6cfba99e8ab66cc5f686d48a33aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1b2b79aa9f8fd20471347dc567be25c

    SHA1

    65845fdee5c2d63c2149576f11ab20d91ae7c401

    SHA256

    76b6086c68bb6047705d58a5710d2805c64fde3d2171b742392dd294a596adf6

    SHA512

    48d5212b7864f6382da738f1003bb58217b18fccb2adfe98529bd50c12d23a37dc47b43ed54b49f4e2c865e2fcad5d45547b167cb86dd454f25aa8142f228f0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    169dd17ad1ba107b10c8f318e0d2ac39

    SHA1

    5b466f2bf1c0d5fdf66257050aeaf7cce6df2fdf

    SHA256

    b12670bdb48d1e08d9e47cc1e81b61cb1979eaa00e2d8343fe8a019f12979976

    SHA512

    403df92255c4014fe0e2e4418666ac104337fa726bc73cd61271be9139f15f1148017769e12fc50d3ac18259a5713f5c900cefb2696f5511a029a16c04e57b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4d650d6dffa6a68c388f85d58939951

    SHA1

    c0e21d52b6562f6c1152c34812c3695e974b882f

    SHA256

    3ef460976377a56586e22e6ea8adca81444fb59e60a519cdce6e867661b599e8

    SHA512

    24be2b010ae07cc51cbc6fe73481bd8e26b662ff18bd41088fb85e7c8f0aa231c80d5d7026825861311a8e7a141687be5dc948e957c24b4735d9e301fbfde468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23f389153c29d5f8e5f999a6abca7992

    SHA1

    f72eb3d41f1e05ed367db6d638eddb7bec61d995

    SHA256

    a0a025acb3432b1f8e7c4b3819d81b08bcab755b3dbfa35457739566f4a23178

    SHA512

    8189e7d6e34abda5bcd4a1ddd2c3fc3887b6a1b3a47fe0541a7b6cba141f5570c3ede92e036ebaa51991e328bfde550720976deb74ba76a6d22bf5d64a44304e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67579a64e1d5454543fb2fdca0acfe52

    SHA1

    43dfba557b080882276185a86e99dcee471c0b27

    SHA256

    8ad27dffbcc442bcc8215f10e63d5c75d41a22e0348536bf5bf1fc7c4a7196cf

    SHA512

    f80ff9bd1f7611114d6b32cce1ee7509ead2432066935887d2a387391cd32abd83b5cb532d28ebd70510a514a2d772c1296cbf7397d813bd066a1be1e36ad80a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c62c3fa763ade39bec429c65601ec59

    SHA1

    93d4235e29d64b7d82772e25956fd3c2656f2f34

    SHA256

    c1e98b92acdd2e45412760713485aa928bd3060aa14090f2aec7300243d2f7ed

    SHA512

    922c60f6a76de279a5da83c7da43d7da52ac7e3fca4d773b23f130b7750909e408cd9dec6571b899f29a589861ebb3ca76503862930858f0f78f90a4711dff6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3823125826bf529482112c933e7990ce

    SHA1

    a5fffc27cf206f0be95025b1b8c6134d177c65f9

    SHA256

    5c388903ef2aa5842508803e1fe6a2ceecf78fef04ba0d55ae03da88befbffa2

    SHA512

    c454b57088c845f460ab662b1c599d9a905c3769b2df5eeb7218f6c78a15a30eb91f02932fd1f88303dcfd2fef325ea54d4f65494bd1a9e5d88f2a63d2b2d5cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c3b597eaa5cef29942c86f1e9b266da

    SHA1

    d02b66efcdea270ce70d43670332ced139a57b98

    SHA256

    2329adb37910ada7b323ab47bbd7bd46e5e47b8181aaf42dc676dbcfd3730869

    SHA512

    066efbb89b5ddd42b8d847aaa1b771633b2a826bf5a9d8fbfda87703e05bc931d1f5192b8d5a4881d27e1b0c4c27a103c21fb91b8ead34fff78f0f6301ce9d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3725590f7eda87c472286225de815c44

    SHA1

    ee837e2ddc2a1c441f4e1a777501fe59d3f231be

    SHA256

    66f2f1026a2516a2b9aa927ece11acde50306c842cc78c46ccc973f4604ee2af

    SHA512

    c5fe62bbf0f136c7bef675c801a77a74f39d0f269dc41e5d18b5b5de9aa2eb40220f39e2e73e36b38b5f63c1d8fc23c552e671189ff645082c72d4a7755e74c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66c237e5c4198aede664063ffd89e401

    SHA1

    ed9fa9869b0ecc8f2d23f9947e6a01bd2d5a2c55

    SHA256

    ea3632d628a4b37bdbe792a51c1d1a4fbdbc07b77628751cc0028e4ec7890c55

    SHA512

    c550b4b46edc760fd56893e0777e1c87cd20c471678e8e481dd4ffbcb6d21df5fb1eb60c90600eddced13a90296324ce0d786cb6765946dda38b5007aad14511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7b3167523a3975d06c76970bde286e1

    SHA1

    79274a5c657a2497f65e8cd3e2e9c10378cc7bc4

    SHA256

    f44915caa04cc6e21894aff0656e6764e7afb16c5219b45864fbc4ed5f755460

    SHA512

    8a3523b95863277dfcefe957b72b2ae7e06cad7aef9a104c50a03aea0c651435ab285bd8f74e5c714bf32149ecb9ff85e651a0d929b3d163c106d5d16a6828a0

  • C:\Users\Admin\AppData\Local\Temp\Cab255.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2B5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b