Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    17/10/2024, 15:04

General

  • Target

    5273a193c050f17dfb060e5461ce6a7b_JaffaCakes118.html

  • Size

    6KB

  • MD5

    5273a193c050f17dfb060e5461ce6a7b

  • SHA1

    9eeab9fae6f0bd4cc02c1d7d202ead1db5859cef

  • SHA256

    699cb28a434503b85570fd54a28ca8c1f8539df8848c1b91aa17234998898262

  • SHA512

    cb69055d9acb96b4ac8ba62c9bddb4c6fb26a810e086b9963fcdee235bbe70b0b28bdb509d76a7ed2a39ab431831040e3e6c2e6e0378bff30ded85e78ac0c97e

  • SSDEEP

    96:uzVs+ux75pLLY1k9o84d12ef7CSTUiZcEZ7ru7f:csz75pAYS/hb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5273a193c050f17dfb060e5461ce6a7b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2432 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b533493bbd22bd4b8046a6a971d71547

    SHA1

    3d097ce91736eaee4644c7f79de7dbeafc4cdd77

    SHA256

    0ed59a1ef9ef996f9d70639848675990a9949f67cb097462c84133f2115175b5

    SHA512

    e73b73d256d79f0b9d87866f8b2bd496d406e10cfeb26840e3b6f117b982fb82087c2f32ff9f18ff373141b705bfc56436b0a6d704ba550cc690b6e86ac9d06f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    706e5b17cb334a2c560d3218c61c0985

    SHA1

    590fddf5a6e04d80013f96b19c7210e6e10a1154

    SHA256

    229ab0d541edfba8ad38b40bbbb80954067162ba8d73b862826260b03783104a

    SHA512

    08534ce4caf7dd11c23a1683728de16af1df28376fe3c50c472c9d95a0c105911e2b379e779651b45a763dd0b757e24faa1a23d527d0e02e8b262387802a269d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22cdcceddde4a7f4e0deac83e993ed78

    SHA1

    efb941076468b07db63a9f5627a333208b24fa96

    SHA256

    a69479da328807ba70776e71ea7f426823c28ae56e23cd3543e3a20ba33f59c7

    SHA512

    1d6ccbdc2ef9afe3358fce27c8877ced16e6c2a83febe537679b282335211583396dc9b6012eac4d9de096eeae26ffa9376d3988770a4a4f0506c307b3170626

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dbec930ff1198e906e98790b8beb9ee

    SHA1

    1d2b9156d60fa52672738e58fa3d413ac6ec4285

    SHA256

    4436e02ae785814532301f1e6102bcbd2853fe2d2e17b93a785947f8a977eefb

    SHA512

    41d7a853f402160c77ee5a79d745eafff3009e5402f38ab5be8f85373924d56780455002ccbc4af5e265908e3ab58e5dba4de0ad1d045827cbc9b934678ad4bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    317f662ad9467375f9dfe8bd64d55ba4

    SHA1

    bf814c8dfe326f56a9ae5897aeeb9e7a4d162097

    SHA256

    61034ab9b881f5fb9c2c6ddf3651608381e4ae9cf6899c85007418c94eb31716

    SHA512

    223d345cf9429b2e5470de0e09024fa4c91cb3eeab8247535ca540e915fe431a37dd0234a0ad153dd44dcd06fa239f541a56b8ce51a93b0f9938ef4c47f65bc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    174b72d593031b4d4413c460234e0943

    SHA1

    7899dc221dbac7ff02e1f94de76c8e9a9e6250df

    SHA256

    b2eb122a83e01e4bd77ac9a7bb9a8b564041bd7688255ef59acbc620e655a51a

    SHA512

    04f5211bd062558880ca97a4c54c1e307d4cd3805e5416f9d83634b16d47237c9f9536135248372578cf2c2ef34f1260f0d84764a36a8b34d2d3915e488b94ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    473d541fab36eb2c5baa248a01dd7949

    SHA1

    7e5dcdf7843f41e8a235836b832ebcda32a13536

    SHA256

    0d3d95ef01f04c4718738e8359275a7698607a08d64c2df6a038c4a4ee192e4f

    SHA512

    2f26c8510b864cba1d11a179761bd774404596e8b10bb605040b426065bb95a52739788ca47b89d8c6cfdd48f639e67c5eb940c227d8aaaad85de28fe05429bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    488f858f60de63177a56f1f4404df8ec

    SHA1

    c54ac132939857195dd0953b2f8622c889ccc5c3

    SHA256

    580df426006ae5855b5d96d37d7463f2dbbfbefbe7f0802590037384878e17ee

    SHA512

    72529b5684c515dded40b682a74461d0511fb7244bb8800f570170615521e81b31a7d3c526379022d90eb2e7477d57e5c694efadec9d55ae98be0d69e8e8f2b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f834e3e771e8004fda0157f109d46fd7

    SHA1

    e91e31cd7be2142a0264d27c0a84eb263f152866

    SHA256

    b8bfaa375735264ba3af9bb51dfdf99f92e6f302798986c0a32e6d3933c1023e

    SHA512

    27a1c3910d4e39d9de18e53414a7066de1405823cb69e83de1327ac259d75cfc0a6543a13e8e29305cd7b82462f87561d39d13edd8329b1babde76a15be146fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dd727f7ca6a3e4b85cc7905bef95a2d

    SHA1

    e746e1312e7419823c2969918b1d6fdf48223f15

    SHA256

    caa2d9ae5630e8e6b862d38f5c15131cc07058cecf849c3cb32d67455f4c7cd0

    SHA512

    038a56d2aa6f735b0f958f9a3ddbbee5e9652da28f4f10dc1630c85b98087ce83e2a4d35e6da35304deb0ff2001426998c0e5b3178be21290d3cad68a0136285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    575928b85eab78fb31e9f0e89bedd10c

    SHA1

    aa4e59574f4a77a92df1f5cdc83a67e17c96d810

    SHA256

    da5e27fb0fcfd1a69e5b509ec13a13af8d2fa1c41134cc20b7a88b22bfea8f06

    SHA512

    a03cc75c007a24617c64e6f5c820556ee82d4d0f87bf9522c41f2bed1d0b8ec78ae6fe0d208ee909b552afbc5dc4c0e7d49aa1f069fa514f500acb1df9a38e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57480d5777d5f999b4886bc563600872

    SHA1

    8bcad9399ef4c9a04f29a85e30d7dd174150c02a

    SHA256

    67bb8cb98dbf92541b5659bad442b252b3fa4eb5a7db87b5b408e03be65e5d26

    SHA512

    212d5278d5874ce78246efa512bd78b4be9d803bf0dff285c7a761b55621c5d0e4009699384d9eeb77fc207527a8f46f83850c47abc1ba840f0df1f2d7e9610c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8a763a9c85371afab0e76333d78e4c1

    SHA1

    04b8b7563af18709cef7a6f02ad68cc45c2d820d

    SHA256

    099ed8301b221fddbfff3257c210ae23f0d4b3da66fecf3d1d5aec4105ac36de

    SHA512

    facaf3288e6ba83c44d0a9467a47b515e5608b435a2e5b1701a9e3c98b51275eb5f697d4b069996d4c498f6a99059129bbf750b94c23e6ddc32234e185861cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d99126cbbb911cf24a7bc04622d66268

    SHA1

    da6b043099f791a57146ec943b205140fec60ac0

    SHA256

    87b9058b2fd5cbc8ef13eaa1e084b81b9e86b721d2423eca168be39e9f1e3f31

    SHA512

    618c9e7589e6de9714e4857e1f4e24275494c0099bb37f0dbb02535095aa23150b4a5461953709fe4487e5135e3399338e8d09d1c5eaa4ffcd648be359521e88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01541ac890ae00aa9f5b8b9084de4797

    SHA1

    6daf8e137c1e6f4a4f4c68182163712e833ea888

    SHA256

    406e0db6fe7ede21ed21ae9f5825f82c9ccbd6b3ab5a9a45f33e2a5976074c73

    SHA512

    90844d7f8b9b55872c44290dbb730f9d14127f095e85017ab52a6b8f50d72a5984297116f9d5175c1c1623163caca9cceaa10e4241fd9ef4fd82d1e5c81796c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3916a700d4846c000fa2eb91184d8c7

    SHA1

    568e3612776c4ed4f7af46f0157ad4dd64cddaaf

    SHA256

    49c363351b38508b9e555d50fa7b7f6fe18972eb6834bd4d308115e60b285580

    SHA512

    66dd8d92bbbafa8d3e47e4009e4d47eedaca909b68b61c9efc98bb05c836504a25ebd2306ca3dfa54f8026cc8eb74a56d7ae8b215b5676bb1bdec5c183e7f5c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c177b931f12f7e2e38b3e2ebab5e502

    SHA1

    c784774fe1a385f86369d662ced5ee4b2ac4ef29

    SHA256

    532b435aea20f98d965561de5a19332e773bc29ff1b54f5d0bbe5ae485bba6df

    SHA512

    f8aad252b2850cc07c53317458ddac80591827ec99a401bfe10e05f0968a974d4cb6309f117fa5a3fdbd427a86887d71d494d143b4d7eb10e5d9102563988c9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    440464d75e0d15d64eaecc6c58c51c09

    SHA1

    9032f600253899226f3e712aeeeb2edd9ddddd87

    SHA256

    ab131814b1aa9b9d1b232e4bd0954d4e9dca185d8fb856f58cba6c714205fded

    SHA512

    655ee754e9039c372904a81989b9de3efe18c8a7faaeddf711ca17f1ff4ffb9d98a379da93693e35e5fd128e11182d544bade38a9d8c034c24c46554a4549a4d

  • C:\Users\Admin\AppData\Local\Temp\Cab39A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar40C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b