Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    17/10/2024, 17:21

General

  • Target

    52d2e24ab0647582ce7904f570e3ace8_JaffaCakes118.html

  • Size

    43KB

  • MD5

    52d2e24ab0647582ce7904f570e3ace8

  • SHA1

    3390aab0d35c567fef6eaf8212dc7ad5f5f837b3

  • SHA256

    40aa87c1887323898b80b6f0f49d6b14171b98433647463845f8c4c154557dcc

  • SHA512

    791d1fb81601d2b96140fe9eca05a7ea20a59c8bf03107fcc713fdcbbacc2beb53d40569544a252e0cc0b7a5f6cd81ad45e0cb72c64ed031357c9e42482ccae0

  • SSDEEP

    768:qTpjaIQcT/Ig0diRbsTBi5TEF+xT6/ZzKQh:KN/z0diRbsTBi5TEF+xT6/ZGQh

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\52d2e24ab0647582ce7904f570e3ace8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8f665f69e2ae43a1e54020b45388268

    SHA1

    a83c29a0476f14132d9ce19a90023b3074ba220c

    SHA256

    c558b3d558b8b7dd5d434c8ec7f4b9f38350323c58eee46f0e3e863729fd3aed

    SHA512

    bc043066cabd0616ddd7e788b9bbd4220bb6b2f4ab7a51aa33ebb89a9cd5282da5b1bb441f38843f8da9425ce5a148473cf7c4f8f9b048a59557160ac26ade73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4c589095332668f18f567deaa435876

    SHA1

    07fb3043c21ddc34abad31d96c745043ea31b1db

    SHA256

    59ccbb593fd18918cd0ae1e4d188df12f550787022ea67ca123299b19c1d8880

    SHA512

    4981d15eac5f40c26e57f33d79670e40062e6a462e235b2b326627769e9c6d8ab2b6830627ab5106984e6d8898df863b26986936a5911ebe93ce683bdaa91d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd9fc961e53f3c157c75db0252df27f1

    SHA1

    0e9c27628afcd809818db3a49b49216b574a7f3e

    SHA256

    d5338bdafc07664296d7bd23f590c3fe6dcb980b92cd50e838eaecbe9e0ebe6a

    SHA512

    b906eb12e11382622c4579209e16b959dc3c0180d9babb75938cec4525bdb41ee005900ee4b1229106270398e0776d248ea0e3ad047f46f5a2720da653ebcb07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c94146b41666d8fe368411934e368f84

    SHA1

    14f6c41c5109852cd2822f7821065f09ca856b28

    SHA256

    4976e7d80e71010ee8a0610e18422bbabdd88bcf435ffc10fe7a93cfa350b25d

    SHA512

    ba51ba0a17b8f96f639aeb9fd56986dc815db427422ce0136d026b88ee78b78e21c22a53da169945467e9506b54e9ba387a465c5d015293f98bb853af4b46c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18b5b98f763b7e5c6452c268818c67b6

    SHA1

    be2f726099b6fdd83d4c16e238695c6db501a641

    SHA256

    88e836fcce324a7d7bcce58cc3c6c2c1d21b1a7078325c5404938ae30192e6e6

    SHA512

    e6e85f35a1e854503983b13217e9ed1d913e30fc91635414c76e72ed9a97f737801fc6fae7a1719a4b49e4a9c30e9c3d2a80edcf08ac546d6a8928c65def37aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74eb382d42e557eb855f4e61fbd0fe02

    SHA1

    221a969c2555df2b34a24362a2c03b7d64a9472c

    SHA256

    118eb6743461908c9058304e325f9f60f04ef318df9715415f450aee2d3d56a1

    SHA512

    717ef185b2be7e6c327cd2fce8d4bc8f9a475a554dbdba41a9b39939742eeb6eb54b2c1f70b58fb5c34aede9be9680a87ca6c23ac8c684589d8339ec29d739ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b95f0db7bb420e81da3cc9287486919e

    SHA1

    54c6cb05308d1e4911eea5d5fb837fb2ddb71b4c

    SHA256

    869884c1f86036d04cd64c2614df6d605c6409bc3c83609a35a0465dd029b523

    SHA512

    e7b52dbb4a2a24fc3add8730d09049e1d2033a12226a503c22639ae36a33b0e0595bcf895539d1d27da326c2e7a2b328783f1e75ac121dcaaba8918e41bcef3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff5627266649d0e9ef07c593ed216d94

    SHA1

    3e87b94680125c6b83be8c558d58e3a91dc9710b

    SHA256

    fff6c1ae03d07b6a62b0859364bd5e1be0442ae4925faeec2c30702b3e4fb2bd

    SHA512

    096319979912c53e75118eda2cb0bd5ad07e632e7cdab1cea51ea731efa29b5b5d8680c5f6bc4ec2d3ddb5b97b6735157ef3615511efa075cd29eb3a07c96765

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f91c570370394df244a0b3ea0c27b17d

    SHA1

    d0906dc6e11d323f0e004adb32d72be8fc5c2603

    SHA256

    cc0f802bdf5924dd00e9c6b6c51e50898296a07e8f6c8eb54b0033c458ed2e7f

    SHA512

    159c559607b4122cc70be2900069dc36d9c99e8c38f0e4d68fcfa82b447c10872077312e52114e979ffcb49fb0075c6b589cb8bc994741af362197091c3bcef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f54aca6fe130127a7f634d19289b808

    SHA1

    0cdda3f01713394e151ebe993565502a36f64152

    SHA256

    d60fe057b4f3094cf0ae8f764aec5cdf8de636320b37f027b6a131558df599c1

    SHA512

    097183898c31608a9fcb51f1899e1c674d4b3fa25edffd591e6e84685d597abd965b365c13c99424b919bf72f13c5f2543ca21aa6e81cf6ad5c4a39a370c0d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dac9f90eac13b4ccc75b18923abaf25c

    SHA1

    f8aab631141efebc036a43f928e37e8b3fbaf43e

    SHA256

    ca8c154823a0f845513be7b7760e7237d7a4cf9ded9002f255a68be297360572

    SHA512

    ff9565f2ee86075133101e5f3d6c929857d493a7ad85615c723ecc7222fcfebd072b3b46b296b2e56de2708123210362c2c72215983360442221ddb9f98c2c43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    933d2ea9a73bc20c6c510199e1726a39

    SHA1

    45aa5f08785866102575119cb65b79d512f7989b

    SHA256

    316cf836785b96ad3135d95f2471508c38fc5777ec814c38c70376dddf7a356a

    SHA512

    8ec12cf3106efbc70af0bc0400ace47e98f8caae6548fea4e035b32b10e8a9703a1d938a6d6addccf54794655fb7954282966eaa15c841c7ba06c4636dc8af51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7846b6a74119b0cd0a7e0c22f61261b0

    SHA1

    9628c10c7349ecde389a003665a1b51b08b213de

    SHA256

    5abf8a9c387a35f7124fff0052acc7d0cfbb6a984e0dad53b352787f845a0413

    SHA512

    be3abc99e6a813a46d285fbb704aed9b14c47109c8056f2e512998e53ec1f08968192148144a5acc81bc638091d39fb72b7cff1f5672bf23abf2230fbb63a92e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    961bde8bf291b7102509b38500301335

    SHA1

    8d6529e7adbacc5addec29a735d2431b13053130

    SHA256

    b8ab5f484740b0129021a8f0a19e89ed2d5861ca902f7f93ded044af46239ca7

    SHA512

    18985bdf3591f3e9803d7a44430d80057b06064aebf557fb08e075b3cb9d4f7723aa49284f5c632d9e7d469a53f1eace9ff3c4075951c6605985a601540b544e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecf746115ebc8d288aac5306248f761e

    SHA1

    eed08768c04a8ca49de579aeb136c1a2159b9fe0

    SHA256

    737ff1e2ddd0b28b2adbe3381b82f2b12125cfe308c42238ab5e6113fb24f597

    SHA512

    dcec546b81b7d26229ce1c6b2b5ef41504561b33060d58db12b3cc3c982c5b15c43b36eb1299bd2b57242985c146e039123d4a730844788ed28070d5e7a7435e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68ab5bf851b80da227c62ae4e8dabbdf

    SHA1

    23efa4ed395fa14a2a9dfa423c1fbbfc40c6a376

    SHA256

    317c02af9c0e9af4190abe465e58d58ca19382cbc3dd13b156683cb80d948b42

    SHA512

    75869e9aaa997aff593bf9062b729be3490842415bee4166ef6db98d4fb038a04701e7279f91cfb5296a8b36562f16cbcb2b5b8375810f373c964b403cef1426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a02ba43ca565a148c4bb5196af98290b

    SHA1

    a124ab2a955e38db5603ed09fc14953df7af8ca3

    SHA256

    0fcef6127dcab274723f09ca2132fde9c6123475a8d1cd351dbcdf248e06dfcd

    SHA512

    165cf0ce248764e8a3e722d4035c510f70ce92b409f9143db2eeeb79c1fce44b14e89e5e5d04ff043fc53c1a97105ad95ce26897d153ef22068049fcd35e1b39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a065967ab0b48d26fcb15cdd960ce8da

    SHA1

    7f5a1f9946cc5a96498fa80db66771ded3c7d5d1

    SHA256

    ba35937d3408c57e35a7c18b1b28d0f5ce456d9c24a8f33b8d1b9cd0d876bb46

    SHA512

    8ec2e8c8e3a86d4b17f417c2002f6a37100bdbac7470cb71c8735d77347be307f22ef462c5c4efbb3eb6b9fcbac287ddd2f039d32b517160ed791ae03e6beed7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3cd4e7d6e342cf4f3459d702212238

    SHA1

    7c5df9110f30ed956d71860f41e0878cb9671782

    SHA256

    2c08f5cda677195ee065586837d111dc818ccb54eb20556cbea3475d48e83625

    SHA512

    24f6971a1e642622e11af66d3e444c8c2e27f982ca090e9ab2fdd05f51e75f78343afcabbad599fdb38177151d2adc04d56da707b01339d5744fb8ff25304f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c64cff98bebe37d4760339bc60c23932

    SHA1

    a3f2b7d341ee3800ccedae141f71047c410d3b7b

    SHA256

    c4b972c9b76af908319ea3eaafb7c480d7f12555efe0f01a322ef4fde7409d40

    SHA512

    bc756132dbdf59f62f066c337e9e60231f3bfc1420d0990b5e97d8b2f0460ff760e753117aa840431ccd3e90969102da41fd43c686729a6b592a5bf0b3875968

  • C:\Users\Admin\AppData\Local\Temp\CabCB8B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCBED.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b