Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    01/08/2024, 21:34

General

  • Target

    81ce331ab14c014795b3105a10d412c8_JaffaCakes118.html

  • Size

    120KB

  • MD5

    81ce331ab14c014795b3105a10d412c8

  • SHA1

    a96e68fbbf95277e8a410dd0c10bab9a8650f143

  • SHA256

    60dfd1fc12e86e3e17230f8766fd4f515ad905f55d9109a3986d3f0e4d45c45a

  • SHA512

    2ef62dd1d551fb47f2a562e27c57ebc44aab02ecb72d476b3fb421fc6c2b3143a07d3d6a2d7752fce1edd04a07ca715229aaa0f51a641fd07600aff13bcb97b8

  • SSDEEP

    1536:0H6+kOYC0pBatFp/cJ2tFzZUFvoXQFkC52p:9+kOlQ0tve2t/Qqp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\81ce331ab14c014795b3105a10d412c8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2948 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44f5d8bf813977b1a912de92a940988c

    SHA1

    ade9ee53be3aec8a119f5cb82136bd9398d706a6

    SHA256

    cc71b9139791958d86f1a1aaa63d959979da9c3df3977b74abaccf0bb8b4962f

    SHA512

    4b3b563b31bbaa9e813995484439c5b81e4d5ec67a01f991915f33aa249724173ffeb2bb7bae6a199e829721dafa11b0652661ac3830f8d3764fc163008c87a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a66fa37982bdba03988fdfae0e3c2ac

    SHA1

    39407c2e009eb4559a1c029be4e558a346d65c05

    SHA256

    8109bcc696561fb5ef8ede15d78b89a0f5789853fa3caf6b5f05357fd906d1f5

    SHA512

    5f3f26e5586bf8457955f01d7085b3e3f3d20065e4774fce12ebdc055ab918209440481705e7ae90fced53618c9a552e1e90777d28eb3b0bb15ec894892f2066

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86857064fe7ac4e9aaf2e2a87145106f

    SHA1

    ccb13f67a4d1c62dbb17ffd33c0b24c3ba46de19

    SHA256

    930e3ffc37e38bf3a18b5849b4680f22c40d54dfd837306c96843dec4e820df6

    SHA512

    169246319b875519dcc0790c84ba1bdbb296e4914172b3dfa33f349d96ed28a07e7687ac692cd3550ee17aeb1ec2fb98c3198b5918b67cf3464aaba96c7f2699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02a08f87b32a569212a8191a34a4099c

    SHA1

    c9b89b3f5fdc960714c42f0a06157b4426509d18

    SHA256

    c483179fb5574d16015185333991c5649bd975daa05bac7e8bf5fffc748ab16f

    SHA512

    f94abcd603d4c42f11073a6aa03ae4ba0bf2c19429d317dd2d32a25124c144035cce4f26ee36d209a91e762bd5d86188414fe36864d3cb48d2ab221662fdd7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    453d3c67ce2308cb2a87d336a718c6d6

    SHA1

    d988c7cb11d52cdeed68a372f973061eb3730108

    SHA256

    e7eb38df5d2a52f62a8ed1180aab40e1d1c8d8d6f435da91db05ebcd8ecfaa33

    SHA512

    7727df44bb9963d315bcf93e250b970fe7d2375d8aeb7cd7807af7e927e2f92dca6140c64b31de8ac7f792437838d2ea9ba7425d47c9c0e4350214e4afab3884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5736d90a62ad22917d76e40d64774a11

    SHA1

    c05c0060d2f8622f4ac82e0c53aa002a6b7ee5ca

    SHA256

    6b5224ee499cfb8c5e87784dc724a8a8615a90639c6c09d6eed00a94c4c10806

    SHA512

    0a92c190929edab19d4b8344e3d2297c3d3b2ef1c64e4358e574c43425ec578ead0ddb93f8552a402bb5c2f4bda420a330f2ea84de4f040322c0574cba4cf1be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5167033359c6ef6123928db11f2f770b

    SHA1

    c1690896bdb2de14dd3b0cd4db4a5a865fe69c3f

    SHA256

    5a733e24b5fc416a0bbeeacef54f0bec618c3e45b9a602cd70cd8be37c230861

    SHA512

    df3bb9dd8f48cb5def08173756e078b08f4c6ee018b56fd21363287cc475330b770ced4b7ef5ef67fb9d9d4d538b77079ff848b6a6b0f30ae8b3797529440641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89acc43c465be439bbd36d726a1347eb

    SHA1

    9d191f1e790666b66d7ec14575707d8ebbf54edd

    SHA256

    6e79616c373e455958eb9f28260d68d25b5fcd7b6255144425a27d569c9d3233

    SHA512

    00b861cbbd523de8b4d389bd9f1cf1c40c63aeed124dab0405d06430854eb446487ea6f9059df326aad2a2c5ba2033b07e0e0042481d684fae08b2fe2121eb06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b1a2731451b2b4adf868a5ce51c3ea

    SHA1

    539b10ed7392dda806b27591e5f31042bfc3c29d

    SHA256

    9c61ae7a6321ac60fbc00b9d3bbf5c36b3f83df797f3e2f158ba0481e8fda5d1

    SHA512

    fe9c517f940c5af3f8c6dafc9fe74ba511df32837fbfa83cb0e937ae2ce0e3b4df1db957e4bb358ce30fcf87f24335753d081625c2082c380fb61a6c1d738787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e382411e409a4d61d32f9bf18a1d19e

    SHA1

    15b369f85a851080870c182910845e224e67a338

    SHA256

    bd758424d5741cf327267ef1f78d501bdcf49e99aa7b95824759af9c837c7ec8

    SHA512

    a6bb23963fec6c0c306989f8d06d956069e45ddb662124ba4b24898cb688e67a3044f8c4af022ec3e60c519441811233b8bcaf41111ea703e24d354c8f778351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9917d28ed3d9a2ad7170cc217c979f9c

    SHA1

    08420a0b6e12e0b09d551283b12ef6603022fbaf

    SHA256

    e9bf6b88e81cb6468011946d14151b5c64d398cc87cb1619bd8ba5b2eca7feab

    SHA512

    beb79855f67ff66c43c48d4a47369b0fc1fad184b8faadaff3ed73727146b0f6a4d0491542173c532754d2ddb8870898a53788c24989570fecd12778802b50e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75066746a900dcd539a2dc75e6c0c2e4

    SHA1

    5beaa859f078ac7beb1c83a5b41b41616d4ebcd8

    SHA256

    0f203085ecc25e1b661327824af12f5a5bb1756e636a559846b8e94a762385e8

    SHA512

    aa801e183c369527376f38f9bdf353a4dc8e315710a21e06faf4a7edc97fe25f357ef435c302de9d2952ab2ad91e836c6329e075187696e67e5230a802c57654

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ed7cb52b1205d554e0598901a6af741

    SHA1

    4d81185b40c2d0db3028b37ba98bae7c2045d088

    SHA256

    b9fe17c6667f51c6984ac29e8481971f126d663044b7814090834525c194ae7d

    SHA512

    769cc424d42238a04329650c29a827f3d0aa693720aa9d1cc4867436666201c57ab6dc170c200996f81abb8a32a3b3a0470d997bed4ff33a31e8f6562ffa57fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f22f66579b992af4e2ba9e8738f5573

    SHA1

    8aa15b75a8474aa15f28e991ecdc6c26bfe4fb01

    SHA256

    3549c0167a807b9e5f0f1229a991cc0b072b459a994e1e8ab1832bb2e4e0b773

    SHA512

    4238543c040c367bb4e036b4a8c46ef15939eb6ffd354f7f08311c78b57a539c37e0b2ff87d0f5ab39176b52d13ed79823d2428019e6e76d5ba5b5eda1d7bc98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ad8d06763408b980eb29a7079d0ed1b

    SHA1

    1d710680f95bd526db2e0d1573f6467d715dd66b

    SHA256

    80145bf4706b5ca157fa7c62add03eb06fb4128ac3884f2e5b84f7729a76fa83

    SHA512

    4d715ea7342a4180bd30d82bdc920d10a7d8d8fb72dcce7aecd134af769e20c18b1fe5027dd4d44bca2603783970b5162c0d28b9bf97b5981eaf2d548d64afc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad5fc6235f01ba9f4cb798c13481721

    SHA1

    956d96399f05178275cb5fdc412c115da922aa3d

    SHA256

    ddc4dafa57df6df564cd4d7a4bd526e1adbda9918a80b34c942f5336f9c635a3

    SHA512

    9a6528c024ea61a32fe20abe01b50216748c41079a3d7f23f15c59f446ee765d134f5087f68dcf0cefefeb072edf5a3f9f8972568603e3269aff858268bc4d2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    551941aa99dc1f541bdddc551f364926

    SHA1

    c7b96dbccdfb6026b7ae79e57b56e5fff9a7b6e3

    SHA256

    204e84f35b9aad6e886ff9def3b804146b2f14cdd761c8f422043414bfc31b3f

    SHA512

    40b666ec9ccf07a374c276c8d7c2e889ca4d460314a2f34c6a6626c46a970d89fd0a3d9c2bad14d075d924309c6bfe3bc2dc6add8896bf921782aa96df53fcae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47119608dfb9bd26839000188ef7875a

    SHA1

    6f461c7d92864e3845dd0371f0acf49e74454e46

    SHA256

    acd3250975ad7a1b5d011918925fddbb99ce37c091abf4c85161384f6ef86ae3

    SHA512

    40cc8e9434845d6e213a3b929dc4f0c06317c32535567fdf05ffd9317672a12b9fb555105aab946fac93ec08b6ba527ba5cb4d5713546f1f67b45b0709603c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f658ee05ba2aea3f65e8f0879c8f9b95

    SHA1

    aad1fbc1aadda4b541975b01609fbaff6669baed

    SHA256

    6f8b40264414b61fe8e06d6e73586d86d7913bcdab250543161d7d6de0432e67

    SHA512

    c7a4e6ff0ea89db05aef727432663259aacb5733549f94a52b2770391ea01de66cd7281c3ebd189ae9583629100ff2628ff5b5f16e997ab9f739dbabcc67786c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aef12f69f16cf5e70ad8a7ece4d1057

    SHA1

    66a8d92284c275c77af7b5cdf494c6258dd10b6c

    SHA256

    5f81223574b8c384fbc5e8ce9e3642d5a9a30b5a5505e7afd143dbbad7992070

    SHA512

    d2aa2beb5ca8145ab43fe141ce01a2662e6bccabf9e21b5e226bbcaff8eed643d2d566b981831f43a5b2308bb3f83ee7806c9c98ecc4a8d76fe2b9b6245f5aec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf879cd00542b542d7a036ae5739bf3c

    SHA1

    128193de79da773ebaa6d91314a4d71ed7014014

    SHA256

    3a445dd299c981febddcf6875fcdab809b7c5e1dbe2d6adb5e79230066c20ff7

    SHA512

    c6f3f351662691b287fe528d0dcafc2f96e0b274f7a9f93c725ab90621130dd033089acbaf740452615d56854a78efcec345134d043fe8613242e10c406fdefb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fd2a9b7b65ca2a2699991ce73ba3bf5

    SHA1

    606ecd745cbbd42269a73a9daf3ad64610f6599e

    SHA256

    78db2fa9fde67f5466a1c81ed13dbbed11ae8ed3e1bafa7d39641c8732e9ab5c

    SHA512

    57159c1b9c378ea7e22cc8b5cddff32a2c268ef5ba0e5cbdc1126292ead16bd3a8bf73c567b79bdd7a3d5e55de5b5f01c3381c5156d762a4510d975c85984a7b

  • C:\Users\Admin\AppData\Local\Temp\Cab3F72.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F74.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b