Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/08/2024, 21:26

General

  • Target

    839a575bf2afce21405f50e09f1f8b1c_JaffaCakes118.html

  • Size

    10KB

  • MD5

    839a575bf2afce21405f50e09f1f8b1c

  • SHA1

    3c4fa5cba38165c71a9e4a3a1f2871bd02c4d68f

  • SHA256

    72ee14bb3ec5b2c85cc3818bd774f4a59d7c8d8178165b8e9959ca57fe78d730

  • SHA512

    09a120ea4ee1086f5def305ef3443d77df647332b45c8b7fbd40f10a52b24487db55a4ff3798fb91c3992c1e6b79f2aa770c1fabdcb7abf0c71f57615af8f9bb

  • SSDEEP

    96:uzVs+ux7RYLLY1k9o84d12ef7CSTUaGT/kjyp+AYjK8wlVHcEZ7ru7f:csz7RYAYS/r0PPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\839a575bf2afce21405f50e09f1f8b1c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a56c77fcadb49076beb0dc1f2226560

    SHA1

    5d084569688e8d9a1ebd31f66834d85db26afdd4

    SHA256

    49fc5fa119dea482692854d79f456763fb404ca68f6136b3e891e7dcdd81016d

    SHA512

    63ffd4bb7afc8a034eaf983da66a66348ee99e30c91c0e8de51ff8b601d1775f59801d04fbfb317e02737da26bb410a3f814eb95a1a12448955f42734a4c2dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7260349d4e8a746038039ca1e97992c

    SHA1

    c2c0911264d9ed95a337e6c6b6bb4298b51f69a8

    SHA256

    97ba4809b73268191dcd9b486ec0dde69d9875196a80beea3d208fe42d6c1e1c

    SHA512

    d7ed5939bb48cb0b6cbea837c0ff267da67088dab399fee916fba4e577ff1f27fb2e41c05a6e1feb6ca738cb31b10441af2a37473a2d197ef1a3532685ec19e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d86231afdfed4dca9d3e4b82c9acc6c7

    SHA1

    afbff68c4077dc757a7dcaa3a03cb7368dac21be

    SHA256

    df6857fbd4bba2938a3c8a573a91e3cbd3903d3f0686e786cfe02a4665fc90f3

    SHA512

    5e1017493da5860a35fd78c41d880f518e66c5592240a0705b35e76a08dbd505a27d974941ea205469a38037e88d7bf7ddb5681cb695994ae6c620e2bbbe06e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1a74c96e7b5389cbdb59c51c2f57f61

    SHA1

    d4f5d9a0677dd2cb197192dc320965fea1ad0eec

    SHA256

    b317424bb2b8e7395c79b5b3b7a9433141f9e3fb315544833c9909528d20dd22

    SHA512

    dc738b4b240c60a66cc3ae0e94dcde8cd918e3a03ea8d1ea20b10bf6e8f778b7e943e85f9de5fecb880df8b3b3ad808e3f4ed71cac4ae1bb14a22c0f77559639

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a893234e261db9ad1a4a5280a718dee

    SHA1

    58c72a7ccd61b5890f0859893da44822481762a7

    SHA256

    53e5df984bd6ec4a28a369f470216dee4149df8c8441f06ea7aac505fccd0779

    SHA512

    9514fe7f7e6b38dcc2cb9b3e5a2984235429b2b28810069b9c64e4c4a8ecb1753aa803b7472f24a894cac633e981781bb5d83378fed6ba375512e11e98a39a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10ab4cd6829582ecdd6dfa8448475653

    SHA1

    d16dbb5fa44497b2e282da6569d3068eacd3eb90

    SHA256

    3efe324861b2d8cf8dba75a31c20a5e5ec37416d5e15bc3c986f3bd0aa5dc633

    SHA512

    7b0e7cc68be764f41322d0bb202416e1fe03d8fb67e8c235c68fa846a4441a4bfc72904359b114b27dc254d170ab6fcfb008198af0214c7fbc944b062c06eb90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be0c48125f4db6b44a520bf535037b2e

    SHA1

    0760143f64e35e4b8dde2fa10a358e9dc9843ddf

    SHA256

    d6d26f3f8141000d1f70e4fa02fca743ccceb87c303e36e1636f40e5e58cac76

    SHA512

    edcafa44c39e0e31b8384c6d18cf471674a531a703992c630ae158a0f7c7af9085581c29bf1902b806ab0b3b50e56d729fc07d692039a8faabdcbdc086bacc86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    938729093fcecf36033f344cc07d6565

    SHA1

    27488910804cde1de14a8d843d6963b21e9cbf5f

    SHA256

    f0b95ef735660776b29f07b216a3562b680bb0f2dc6b0d531c4b7ea9a5d86b32

    SHA512

    961a424e071eea87f046abe6fdfb8520d4abacf9edb41b559f7e9220fad5bf5cd62407fbcfe66370e91ffebc5a70ab2b1e4c8bb3a60b96f5c26c2f6f86922f59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a23a4f2a887cfab552e22fb567111e6

    SHA1

    fe9be53ebe20acda62792f25ac45c4ff285c082c

    SHA256

    86ce15bf584a7040cc7db8ba01e592e680029c5979b8b102777c1787f78d1112

    SHA512

    e072484d77ef4d79a107ed384a1221937598efd8d6c49bb82c7266219f28625dfd3b40eb9d5a154929aed04963806d0c39c7e7b2979c6ba5dc7a0f5546068a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f4553167d9150f2fca84fee3742be73

    SHA1

    73594f997883056ac9f0d056504d6ce1f7263665

    SHA256

    039b2e1ea7630cdbe232e1fb9d71236b500817176e26a50452097dd366b45bdf

    SHA512

    f9b3f7e5f1201f20ce513c48840ba11dd2927ac1465440a84b5c80a08a0407dcf1a6f6c9d88956edab05e132add18b1f0c676e045b559204af4aa39257c70437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36f1a115f6f9a8f00a597e077cfe30ef

    SHA1

    30b0e1cd9080f6f43e7e7757daa2992ffcd0b8a7

    SHA256

    ada64df7bbda204428872f8a3bf5f6eb20e0259464123835e613c0e342980def

    SHA512

    ba04b9d9831fdea0b821ed8834e9ea9bdc593fae49d067427e43e4de2af42e5d9c82a6eaf87f74ec769d3f44fe23c14c6c30e7400e82c271dbdc869a7c473732

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba1e15ab9f2f08ca6e3562d30a52a7d0

    SHA1

    486eb37eb55e17b7cf808ef1dd610f81849c9804

    SHA256

    89f83d55a09e2c8533123e010fcd6c9b28b717146e96a648d50ac68674b3b21b

    SHA512

    1b4e800a685c9731890adda88aeda95b222bfe046677d8cfd75bf4bf9bfa866e2db875a81c85bab448b2ad2b20a80ad245f1ce73d227d00c70c71bf5002d263b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84358278cd47a7f7ba9f7d020a76330a

    SHA1

    3d72f6b269cc625800b110c4503092f4fb407f4f

    SHA256

    698939f254b4dd4050c0925df99a5232265152f3526a6e8af1f282a9aa3cf60c

    SHA512

    3549fc4ef7cc7a52abd1e21f9ffcc3aa3e6bb1acec90c16a2a98590fac842d692c2e6309844c1bcf89ac79f9e1621af1b894cc5c1addbd4b6ba8922864b749af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0728cb20a822165c0ba95f8e5ef9069c

    SHA1

    8715ca9bae7416a1c0c6b8116d89dd717aca7ca5

    SHA256

    2743ee177a22a56c2d77a7648f964cb6f5dd5b5c63b14485dcc5cd53cf586d09

    SHA512

    a4831ef01c36b8c43b7118a8f1a496da96ccedb78229f7ebefdaafd023cc12173894b8a7aefaab20878926f55db2b4e07cda1e7b0b46cebf0c9ba31a35a7afde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f30c2dc6533906a33f03a4d80036d12

    SHA1

    a4430dfb710c1d60af700ede289302525012369f

    SHA256

    22919481cf69ef58a13d5ef228a61a5ab34dbe1d364d2cd17fe21d97d7b09ebe

    SHA512

    9831fcb2a2b2d8fbbfb9f85675d92fa61c84a3b5913777b60d1628f86e49a9f399134bc859893aafc3d1f4305bdd4987c02fd1a789e3a442ff3b641b1dfb816d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    583434160f6dac8e3be0fdc66fd81f92

    SHA1

    33767ce238fb8c6b541c38ea3a73688fd730ea0c

    SHA256

    c09533542a2505a1d86d3891268d35e493e3d020ae09b759b6280f7233023262

    SHA512

    c6efd2422569a33e4db24cd35f5e71feea5b4123f2a7fdb02fecf220c68f61a227027e0c2d76acd639043136914b87090c73ab57722f59b326808d973ed28916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07f0fb7a992c35c6fd71ab4c3d35feae

    SHA1

    363d8f67ca636760c1dff04354a24e144d12650b

    SHA256

    54a30f51f0e3bbdf848dc4f870034f063b640c83cb28cc250a0d8aaa1252b934

    SHA512

    57b49322dde4b7e89a0701b870edfd8b7f09011f7bea3de483b862844375322f7d751a21c89c59dbedbb9c2373d3b317903bad6481a3088aa2ba3a56fbb661e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42e61ac2bbfae2a3dd3225ee7d9df1fd

    SHA1

    19cf7d526d7e8503a7cb39c9186ea4029abaeca9

    SHA256

    0cab09f6e48068f4683d021e261dc8201df3832004fd0811523d03917c32e706

    SHA512

    e3c2aa032b9925ff43b9bd7e512b37cca7096cb81fb2a9642d48b925a2a64804fd0dc968c1b7203f9da743576f1d522e75114e719b8baeb3c8a456afae957c98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    016f3fe980a6663a9384f8167efa6487

    SHA1

    e838c56ec41d7af03d7df93f26b898a5b2cb1652

    SHA256

    71ec66e5aff87396a887a8642ad70fd912bd13ce9c3a3638cc94209064d5ca52

    SHA512

    353a4219a0f27e16457e5ab53afd0b7b3073b8230703d621b09c25895d76d2739c6257ddb9a21b7d19a9da8d6354a3f3ecd93c6c3c232e687a0755a12e640d96

  • C:\Users\Admin\AppData\Local\Temp\Cab2C50.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2D0F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b