Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    24/07/2024, 01:59

General

  • Target

    69d5e7d84974154a92785e74abf1d1f2_JaffaCakes118.html

  • Size

    69KB

  • MD5

    69d5e7d84974154a92785e74abf1d1f2

  • SHA1

    3971c4fa1ff1f437248a84ddd69ff846fa620b76

  • SHA256

    47805bbbb4b7d5f8c68313deff618b6b85bb55122b6b57bc96d3be8d38448077

  • SHA512

    d50d6ca29a1227b4f718bda83d6d0bbe5652769be15f8f6d2107179d24f008ce6445ad9a9231803d737a8c3b8f553d8aa544daefaea5c05ad26283599f8d386c

  • SSDEEP

    1536:gQZBCCOdd0IxCS8S1qhT5xdxhb14/Id8/vb9Xf+FwhXcZe2EqH2ukDyY+8P19sN4:gk2b0IxP1qhT5xdxhB4/Id8/vb9Xf+F0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69d5e7d84974154a92785e74abf1d1f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2692
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2692 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a424249e9c51f3c8d8bc558c3efb4b7f

    SHA1

    4e23b6a6ab248023570cf743c005db9afce67cb5

    SHA256

    fd1e9848eb488e8ed157e06e4bd0febc5b7e2b8202ea049964cdb7fa8eaff572

    SHA512

    112bf81fb69fb7a33b9d4b6708ac9c3b76ef5bc4a611eecc03bcdc1845242802159055acae81444a8f35b226ce5c407e98b74bf61d960ae652bf19424c2707d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88b5fc7b8a07aee1454f61364f759720

    SHA1

    b51858fed09389c5fbda7fee903e981b5f6e8e68

    SHA256

    de8c873d130f8435dba141d2b41a4a4b0c681108a50616840fded5bada1cb325

    SHA512

    554bc6c73c02b1c6c181c3d46b85b8aab22bb7c37fab543a4fb0c50c12fa1e3deccb6de74dd87c277083e198b231ecd877481f70fcafa6cc3ef7fef3a044c0f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da085794e2e9af3d91e68f0b7365cb96

    SHA1

    dca3cab228e2ebd430add1b2845c68af1e0e29fe

    SHA256

    9cb6e89cbf6f6f1448ba1856c2e5a68ade1af62a0039ae3e4a943a267128383d

    SHA512

    eb88688a802e54d477f3ce5514a9296bf1cc3f9dd5b8075974f0ba5089496586b5ba67ba6b3ea01ee5b437182b8c0d58df93a75897a303dd3103e74865a13016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    831aa7cad8833118501279f5bdf3cd99

    SHA1

    9e36c4325413b853c82231e697cae0f1c9b30dc6

    SHA256

    58d9e1ff6007bdc0271f18baba8f4010931cdfd71b4ce84867cdc1582717f050

    SHA512

    4057435ee7aa7409f979632cbd02f6752a4998fc32cde0ab4273b3fa63777675ded9a578af24601213a3ce2343076c56ebdcb6e0cce818dbf3326081164ba656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f33b308ad830c7c71df9c3f28c200dc4

    SHA1

    4885e3dfe05d11c3984f8a296e9ac928bd6bf726

    SHA256

    8bb86bc46d8fdf423c92c23d1e3bf80a509d468fba3ca42c364af392d389a978

    SHA512

    eb7b964b1655b641d4e9be67dba1d2ea72106967941cd2bfe97ae607ddcf873fed5bceb1597f2e98a2d915027814ec2ffa177c57578e22d28e3ebc3452290e21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    299bea87c9c0976f9e3b34d07e4d02f4

    SHA1

    3230a6030985657068a94c79e1458ec8638a68b9

    SHA256

    2ef2ecb6e437e3dd1c16c495e2e2df47a93d7680757cb4916818a516925d3267

    SHA512

    62f2f4dbde32e00a130d23d5bf3e4e5ceff0be095e7c2b9ff2170de30dd317a0455e0ccbbc641cec767a38517113bb8e74b7ebcaa0dc896aa134a34e370b0262

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d045a3a8795cb1cc3231c52a476e80e8

    SHA1

    3e47100813c62bf0057382e65bf9c8053f43012c

    SHA256

    4de5e24f9f41559d2c91c95c9b69c1c5496ac1f58ebc1a15e812a39144199a85

    SHA512

    fd2962c29cf213cafd94eaae1127ae5a123163f35f736166c5fd99aae9dc431bf5198c59b14a2977d88319f7f3bd7c8f5532848ab7620acae71b261a48f79d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6bdeb64ac1d601599dc5ecb5f10a90

    SHA1

    2fccb5d828d782f521464b2e8b4805eb148c7f8f

    SHA256

    46ca7b99a84993668d939ce80ba54cea78ac95904adacefe494042dc2bab1e24

    SHA512

    184f6fecb7fbddaedc96dd8313885a9b1de336a8264da0f72c389aaed9205cd631ac6bd172c0eb7644079e68e8c4ab102d80535447694b0629fd6eeb735a1edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bee22d0aa3d8b0649f7bf454549eb813

    SHA1

    ecda846e5cbe94d50f2db4a2da934c1986341fbb

    SHA256

    993d22371a6eb77c3f89f73db9bdfa77a72d6fa7abee491769deb1b50e3b0a4d

    SHA512

    867af75f9dc1955ffa45e81a3faabf4cfe800b36586680017f355b8f1078cc01d678988a744fad202941ad2d987325bed07884e41eec35113d98c32adc373633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    341e2a5a1d76fcf3afb8ecfc1737005a

    SHA1

    aec871441167219c48348a71b22d597048f8b5e6

    SHA256

    1ee0f1a105f1aa14a6d43cdbc78affcc3560199e0f6da71de79845e15781740c

    SHA512

    9979bc3ac335b1461d1cec3c5906a14593289e7b296f8431893f04b0b3b1f7a65915acad360b55796df2d7afd656eac434157d8e52d0359a17649a5a79495e92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff201d7e5372ba6c167a96e831479d24

    SHA1

    9c323cb623bdf2fb56224bccb5d9b5151840e32f

    SHA256

    58d66577aa5c511109f40e7bab70c29de94227868bd2803a54e06c937792ac2f

    SHA512

    40fd9384fc17807d64dc1bc31e6fe467a7ee340be030e277210ed832391d76fffea1f57c5600b9bab7fa752e2e27a57032a390fd752a17701cddff8caecea153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9866a73fda2436a37f37c29fa28e4ec8

    SHA1

    1253410e7f0ad7e1465a801cb8f715de3c1031ee

    SHA256

    e4061798bb91f998c14afce0a0d6c9d7a4221917e8e3e471e0bf8f8d17892b1f

    SHA512

    791d39f9b4f3fb73c8c632f691877d5b84278e0edefdd1b4964f05c1a8b86653e5acd26a2a2c5862d3e39b7bbc14a85c27e921428c507a2d30d0e50e39dcef4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9537d334f84d224a0855a8208ab840be

    SHA1

    c2e7c1a50f55597fae016cc8f568d67d77fc3a80

    SHA256

    f5b574d81e1a0d8fd39e79486482eb9cd8c78c4dae0150166a72e6ba6b49b96c

    SHA512

    781c453b1e64a0ddbd679db5b3325141256e8cbf818c13a8fb20b7e37a1d9af50557638a2bfd345a12405986051335fcffa6080437c7903642d109ba81b25bde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11c32185967cdce925e008d7250745c1

    SHA1

    761a9950e9583293d7e4a333bb141c113b1de4b4

    SHA256

    07e0ddf83e8075390be4a59117f6fe9ce6c90ba2127ea4150e7223b2dbfeb937

    SHA512

    8d03e7211a39284991bdb7136b2c3d4435d9cf957eecf04edd2d27df174f4585de763a4a784168a17b556c96ddd368ef7c041e844a88365861f6c29782a177d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7165fb92c15d59325c06ff6b49471606

    SHA1

    d4b744ea55fe2e77a5841b760f048563e01b62df

    SHA256

    2c6cba8841956eff0eefdf62ceb0a155cbf24c0f17262440c27027f494c1b6fe

    SHA512

    cbde9a3ddec9da85f884a13960578899df1bd2996b3f492dd0dc7624351a057e9832ba847cad942e08e1eadafa8686b3c48d6addf4cab844dcc78e22bbd52610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e05ad70132acb905e89c4c43f146d886

    SHA1

    aed21f6400c80da048554afff0ec06fcbab67f23

    SHA256

    fc42cd8a872a5e05a01cd70d56cb869bf34b731217008aa87972e53d6e4cb430

    SHA512

    bcaae59e91e1faafe146180ad8cdde5adcc4adf84206bf5c6bc5396f379e542ab67ead4a22158d5b6cd29c6da9359f9342277b783d19dd90e8b4ec331ffbd7e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44a4868081a4b2c7fa91472eba588f14

    SHA1

    797707a9aa0f8c78c24a99e2c35be17a050dd339

    SHA256

    f7104383b205b21436b9b7fea86a5fc62d3307a2a368a63e52abd710ae09a92f

    SHA512

    301b340c67e4441d350b44d430db4889dbc45d20d6af1b1a9444443fa213f6882db7abbde46d720a073ac13011eee4e8f60abf53ac717cd0a8730feb40f34e47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    282cef03556435131d5fec0e2e47d3ad

    SHA1

    c4a76515d49232f376d7a305bf80995749dec4f1

    SHA256

    2bdba4bf9a5cec029c7f1056dd5fcdceedcba4274d2cd6e77b4004033cdd2752

    SHA512

    a74eee15e4fe94d976d4b29ca445b058c2a16708c504fedb5d9ba4cbdf095798bfb48046fc9151fec8d1447581f80a33d82aefb8c5dd3a45f67db5ffe1824277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5022132574fdc4980dfc1d220ca79c5

    SHA1

    6187fbd3ae636282ae204755c29cec9c448ff76a

    SHA256

    d382a18bb8acae1604815e410f089a67429021ff18d7162c707f15dbe0619412

    SHA512

    fb469436e527ef35dc38b60df74724d360bcea8a566e354f49da807c90dc11144fce544ef90c16b622c457d1e8783a2a460ec5458ffd8108a26b5445d483b2a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db2101b19fd5487367d5edffb398647d

    SHA1

    e2ba1e39115316259bddc2dc1f1d7dac5e037429

    SHA256

    d1e8b8c6f203510e2180b039058fe1cf16066c420be2b0d378ab728074c7204d

    SHA512

    8d4a16f55d963b865df3ef0f472b216f5b3142a316b39cd5e86b2fa1ceb3b469b8bee70625cfc2d35526d29b3d464ab329c1be034348230cee92e0db9cee2f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a41f81a59937e73857101e780468cde

    SHA1

    49e496f80c3c429d6faa353db2048d23ac9e871c

    SHA256

    951dd1f66c20ce2834db612f84b1e0d718dc8b51197689a47f4b2f7e36d07e4e

    SHA512

    23b1ebb44b4a951ad3b07f9e6166ddfe17e09a5a0041c175399083fcae400d495a2e51ffa3397c15064275f929a784863ead6aeffd3510bc13c6f511f157a242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a8c8ddd96d42f0191d270f96fd4e244

    SHA1

    55c61cfa407d1c953aaa9974259672be018b0628

    SHA256

    8e55966193a078c7ae5230fe2d05b1ae5544c70d2734c3bf046101663c7f9bf1

    SHA512

    0c2851ea7ea93148bf2da90bbce49b76df133bdb74e804f7895504675480255682223ac881602fb022c3c5d8ed289587ffeba81b9c12f0054185f7dbf1df25f8

  • C:\Users\Admin\AppData\Local\Temp\Cab66B1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar66C2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b