Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 03:06

General

  • Target

    82d00cd26c2a829582c74231f1c29e3e_JaffaCakes118.html

  • Size

    53KB

  • MD5

    82d00cd26c2a829582c74231f1c29e3e

  • SHA1

    ea1d70f7c47b16a90d5a34b4756c65ac6b3dacf3

  • SHA256

    4139dcb1b94b9d2a2d87e1fd812919c647f50a3f46746b1e422be6192563cff6

  • SHA512

    56541195fcc9cd042bcd962d12cc04107e82d4a816e0772ce981dc94c05cd9be04d104d4d0cece337f5c24111ab0ef124db9e6e224e0a47abdfbd3fa83d5ec25

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUarunlYZ63Nj+q5VyvR0w2AzTICbbkoO/t9M/dNwIUTDmDu:CkgUiIakTqGivi+PyUarunlYZ63Nj+qf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\82d00cd26c2a829582c74231f1c29e3e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2776 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c01b3bcc44b52a3d01ff6029ba02a6f9

    SHA1

    367285e1fafd05eb6ecb43f04bbb31bf0f0e9267

    SHA256

    cf2958caa9b762491b34616b95fc184aabd7ddfecbd479996feea9b735c4ffb5

    SHA512

    1bb36dff9740f2682fcae1898f3b3295fedd9a412af77b9b2cdc07d395b848e0df54ad227e46e53ace63593f43b029f68dedbe3b27922a3c0bc79931ec184b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ccbc63fdecd8033ecd60c1f902d39b2

    SHA1

    59e2db8adbae219e6f45a17d3fa0194f8baa8bb2

    SHA256

    01fd6745cb459dca5cd19930cd8e7b2cad160cb908c75d53acf58388caa496a3

    SHA512

    716dc14108b0cae3a01baa1b25e028c14171a26f9206b2873ba3fc069b9b24c480e49402674b2593c2bf65294f4cfd14f191b5b03fa222418da13c996c152715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48d85b16baa5986373dccecf6993d4d1

    SHA1

    648eb22759050af892c99eaf41370750929fd342

    SHA256

    0f2d2c7d0b7612fb0b57b5d9966cf7968a2d3ce0546cdbaab707d9baefc8a277

    SHA512

    75099250aa13e47aecfe1eafc3b138d0f05640096fc7c9a115fe38505404de1c08c91dd3be5cb997b7fd8f4953df17ab9c44d5249c9b8dbec605ee3355fcc005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8eadc2a4dfb83d23015be268623a81f6

    SHA1

    ff62594b4bff519302fea69ee1d9cd16ca26df4c

    SHA256

    ada5df7fb0dedb03da985bfd5d80bd2dd1eb067f19f59dd1689ca64de54c5872

    SHA512

    dcd7228987432538d1d22d99f97ea1312dd6485e27aa40e5abd0d95c8fd53717ee2f8f5f5e96547c3d73b111423ee04585d7bdd01b245d3a0e4e53668979e813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16e75b9b17fe4dcc77c6c18543bbebd6

    SHA1

    e0ebf7fcc2c09c9e4e08a5538073f4f928e4252b

    SHA256

    e9898f70ca93e94eead350e5326258b7b7709d840d10b5b10de07c3294e38b90

    SHA512

    639db2d6a4134e717a9be4f18e4ed18c4a0151130a9398afc74132034a5ade4fbd10efe33917b685587d9d337ce0034fbbb1f8e966e9c2d16580ef4d95ac8fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2b854901bb57145dc350ea2e4ac81dc

    SHA1

    80282a73b886aa15f569bea333e233382508812d

    SHA256

    c69ef5a09930e3b40bc43d4bfa4e7936ee7687e2a2be76a23558274e61d0dd80

    SHA512

    775e4e29c0b68bfd996696703def91b0363ea069f25737d375cdb2807a79553bb3cd5f46af8f523e4eeff3f9162c0d04c4ac43c795a77c1fcd87a29f56bfd453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    200a1a9599ac88a63d0774cd45a8321f

    SHA1

    3fcece5d4bc06405789b3966ca62f965d4f7ea84

    SHA256

    aac9943e5396385fc8389af6474b68e99eda9020f2785fc6d217d25cfede8e9d

    SHA512

    aa6fc42c4270ded9df6e61612d49781c1de3a8643955a9006dce27df8b48812dcb577f9c18de80e4f8d0a63e5abc0f7d42ef2d4671b699ed38f213088c0a5c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98ff1b91776a47677a72bfb45c1402d9

    SHA1

    e32d56da5cc23674e04d85c8a4bc28bda89ffbd0

    SHA256

    84c6a8c1916e4f70b3eb74414207fb2de15321bdc8e1f339afc1d719f2b9db0c

    SHA512

    3df5994879b51c3411af69c69b058793f9990a67bb1502f5f5ba5c22e3e69b93f1f5eb36dd18c70dd59ecccc9bb4d401da3055c49faabb79d73c99465852eac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60feb5d2f44c3f6a68f474a132e26b10

    SHA1

    8468c32955924c3f0ff1c63cddb520b21f06df72

    SHA256

    85a3587d57d836a91d06b60d6d9b117799554c12c35a6f49c6d0632d2464158e

    SHA512

    513b970de8580fdcf82c406a002ff16149313feb27d8f3c9cf74627332d08ebfe457c3832939a4a9215decc35e16787f48c30ced75ebd30338a9c1c595cd6631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c25e1d9544048cc1aae278d2711fa35

    SHA1

    e8be4006277357e1acb56e4fd398bb0a24991fde

    SHA256

    1c947af59a4907b9f4127302132b5e34b197c9083ad803eedffb3d808e359a04

    SHA512

    e819416d483be8fd544d68ac3b98d7168c8113c77c9108a725f48a02c1a746e8c81067cb17c020d928d716e599a4dc2aa8092be56956f3ffbcde7c561ad2a1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a48787c13e1dd73817aaa2eea284e8db

    SHA1

    876021ed7aacb50625444c447b40ac8206102113

    SHA256

    3bdd152dbcaa20b7a748b6c1995adf39a27b38312d30a8f08c7d9da42b5752aa

    SHA512

    53e64a64ea7080785d57ebf774d3bb77e49f4008d2d0440551a4c49833b2e7e7a93444a028c1da30b6b170dd2a3a7c832a04a1b2e9d39815bb4f6bd0168e63a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6010e5276b81ec64c7a893ba85e3685

    SHA1

    9e82c861f5a6d970878b1751787caff826242110

    SHA256

    877a1ff94038c57e72a02678d3a3c26de2571cfb0ea9879a53547e6d1ddc6094

    SHA512

    475ce0cc47784a97fae7a528e62fbef908b6bac7b72d56ad4bb77109721d49ce8590aa71bd8092468f931a477e196891ab0e8da5d9fb8d1c8a1ee53a3d23fa67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    253e6ce63bfc4a4312ad4cdbe1e1cbeb

    SHA1

    4d0ba07b2d9b732f5762f843fec50fa6a3c06e34

    SHA256

    3a0b14aad3be08d98ffc3f62ad459fc0e179faacc9863cd54d76ea5f8a923d2f

    SHA512

    5e8751f1158e6c2bc4dac4391ba8e98e20506be22567ac97152d4c49630315e121960a1405b08dffbf98613a019e23b20bb2c4ab3bc82b6903ca0ad24be63c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8278480e76e9888c3b130b709403587a

    SHA1

    dc8214223303c61eb12ab449037c28b15aae6aff

    SHA256

    80172cc4d9d47b6dba4dbbc57c380616b245dc683ed77462fab4b964a55c964b

    SHA512

    f2e2c20ed6cc26ca218dcbad4aad570aee8ebb3924e8379fcb1ea771df89d2ba6d8ae7038e1db1d30d1bfc3c7e453e1b394a30a9aba666e1e105e9338d12fc25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    385d6e6d769d228430611de447977c6e

    SHA1

    8ec435ab2f172772efaf63095af6e1bf26f51959

    SHA256

    2d3e0e0cfe2b820b03536c69183488503bdedad3d6accffef046c37b4510ded6

    SHA512

    631d3188a5728252206c4cd4af23f0f27a1753b7a5500ceb62493a304fd4da73f4448960f4d71356c612c6a48a402968f79ac5ba7032107917c2a3c2d9040c87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9615a9ca719264e96ccf42fda761e53

    SHA1

    96a2b3c08fbabfdddc69b103ef4b68bef4894c15

    SHA256

    5ef2a652b641b942332a53a0d2cdb8f71b24514e4d997e4e6b3df59d50eb17ef

    SHA512

    dc9155b580a299bbadd2d2ab09dcfb2539530af5bf72b7dc13f814569df16344a08d03bd8250b0302f59410084df4ed00191d0402f66623eb2ed741509458b87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b340c93da62038b09b084913d7e1eff

    SHA1

    e90518af10ca8082c0faffa860d06f0a631e57da

    SHA256

    cac713479f2562b4a0aa1d96615db72c8549d349e8fedb8436611a2f54fe21f2

    SHA512

    cc8df9ed4c88a298239146b0ac57d8bf3cec33fc876975428f1ff7387836fd1e4a20a8ed0ed63ae96a387ba26fe3799b909825e1107268640381debb531893f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81dca906031602235987f8e4079353be

    SHA1

    2113125d8939ec1cf8c911280b5b8408ab78b9b3

    SHA256

    fa1ba63664e13ff491112fe8169fd665833303744b74e1044f1f1ccf95424798

    SHA512

    3a56b5c9f65798c6a2cacc4fa4e03f4d31eaa51fddf92b708c5e285f7a80239053b88c5ae09be615b4bb63a6e32c2e1e682eb6af46cd174b9a5cce0481016283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d7d96440c9422bbe9ff6feab891ddfa

    SHA1

    7dd01dc5750eb2878df97d53ce25f0d08a15af8a

    SHA256

    78ea401ea94d245eca641a3484a983585d1bd7f2ab9876b944a9eb402614231b

    SHA512

    412a6517cf27d435172808f53357959239a15828b4c2be4969956dd5318e654ddf4cb04b3676f3957275ee6dbe6ed0f1cfc6fd6dcc6bce97d77bcfa808f5818f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c9ed1c49309acea712ba4fa71e0bd05

    SHA1

    cd454f60dee87889c96a2c35df31e707f2dc4901

    SHA256

    29daad1c96f812cc33350e6273e59d2eb27e6066196d693da67f6c3382f925c3

    SHA512

    227908b6e1bb77691dd65e4dae3d380183b60ff1286cf3733c8452746ed6c721e87569f1140c1ac0f569be9330703cb54b5375390d07b0ac3abd427322242d74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26a154555b152d56ba9e961a483b2575

    SHA1

    f9d85719465d3fd32472fdd22d49229a32744c66

    SHA256

    41e3f352db755c3e82f893739dd5cb19ad6153834be590fb4e263ff0193c740d

    SHA512

    959d87d4616c48191173c00f930d9ed65951ba758517165e8dafcbdc93d0283281efa6848d4eac8f7fa9bb841f742201b01b18ea9fa25d8c462ece6805723c64

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VOGNAB2O\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab1336.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1348.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b