Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 08:23

General

  • Target

    8e02188391b18abcdbce86355c890e2c_JaffaCakes118.html

  • Size

    59KB

  • MD5

    8e02188391b18abcdbce86355c890e2c

  • SHA1

    d37fe689d112c259713da15329c2f78b72b59a93

  • SHA256

    1c14c392c08d78768b01699858d0cc156789e5c54c500e60c2af821736a09a29

  • SHA512

    e0c3747dc9f395b5cbd486a6b18013eddabe3d04f214d903a26d5c99798d7afaf9382588ff1376ff45d2d3db735c1b002c3bfe0e1f47731b674d5598784a3bfc

  • SSDEEP

    384:7fK0pcf0gHXs7fHin+ghB9erGWUhKjfgda+4085PPGochj+NFZW9atbeUO2UdD:7fKqEns7Hi7hB9errFR0SZCAW96eUmdD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8e02188391b18abcdbce86355c890e2c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    55f849e47b9452bde9c87eebf0fbf926

    SHA1

    62666cc9f9afb9e147a0f2bc217723352012bafc

    SHA256

    86bb2b4ebdc112bababada763edbaf51ed634bb5561c6f98c6579e3a96d54e50

    SHA512

    313569dae5fe5da4c8976cbfb0a59731448ba250d0cc046a589bf4e159b044fd93fc6bcfc7109efd66ae1bb54bd3403abeee78c2b2275f7b1dc86ec850fed01c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a254519a4035d2f289f8df6b993ff76

    SHA1

    704d46773582cad86a3fd0cf01e56e345da449ec

    SHA256

    937648dfd8f27639b61d506647dff1d6784c48242c55313b3b8c51ba57f65902

    SHA512

    ce4f8c1153b27fda58a999a3b912c6c8b61556d9c050254730bba408d047f65f074258322423810f7fc40a32a9747580534351d3974b047a2e8bb24f852b85dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05a2d4a041f3270340daec5e886aec93

    SHA1

    2f3752b254d779a9e0f26ea83e2865eb5d9bde92

    SHA256

    b1b21d7c9414d25091c79be20289468e5e0a81de1c2ab77e01caa3469ef82f2c

    SHA512

    c35b41ce938031fbff942289775f302f70650c42f63f91248e6a0a2c248dc8f439397510fa1f72967659ad39a01ee297efd8f24a13849649f1e60cf2d78353fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a9c023c639f23310ee1e05376c5c848

    SHA1

    7ea5d46d7669f08ac38ce5ecb719eb558efea2c8

    SHA256

    29c3a7e25abcb0e53a868e3d1f1870ef2374792c1c9b02c01dd0ff19218c9f1f

    SHA512

    3733942ab8104d5125f55a216f3cb4be20d4ed71f26f5cd7279104671f8ea55ddc7d7ad14e2aef3dc8efe0ef0317c301e2dd59138fcb170734ed5251962d691f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9ecee5178b06f2f240b19c7ebb4cee0

    SHA1

    0d0a6c7256869dc582695df2ba79f7eea4d8ae3d

    SHA256

    7fadca2d41ad03dbb6bab9a20af252331f33b7eee1cd227a6c4e0fe071ec6966

    SHA512

    1a4c4cea50c96dd820751e4b45bc8b85180ba6f341e94740006b7c7392ecc2f82cf195008ecadabdccdc65d1329875f5765362b1e2eac592849a6ce1c2f4f09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c39c5c8ff50f2a85fa92c79823c86465

    SHA1

    f81aedfcdb45c13487f888bb4a368aabb1100a4d

    SHA256

    95dd352a136ca13cf98c043c49f80abfafaa9ca38650f725548224e9e761f3fc

    SHA512

    b81962ca5cb60d636629e7d3ecf09fb06487d25077af1c83576db2eebb02dcfd818f29b9ab7f15a5933b0b1c4f34290850720691eac155ccea65726e53a378b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f7720285861bcf9e45b20c4a355d58a

    SHA1

    125cebd2fac3da71c0d7ea61b99581c99c89da0c

    SHA256

    53f0cdcc2c49f501ac23f719b6f33dda6704b9259c5ae2370d03482f4977848e

    SHA512

    5088ce6460f32ba863e4be4cbd3b67c6feea51c505c22b9b6065d4218505a5e464a7a130ffb1b1ec30b1d87b33c61cd373589d99fa8cc2d8281d3dd60ba7cc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20336ce623783224a3301d59fc3af439

    SHA1

    3cafe05b16254ebe1d793c660b11c01421059f77

    SHA256

    68b33ee4d5bc57aeed71df1e2c501b29db0cae69725a661c4e4e64a3c0149203

    SHA512

    69667ff237964da19f0185d2c33ac6ba26c366079cc69b4d9be4ccfeb2c37ec2dcfc5f18978c3fa350325a6637cdd48a52d110be11e85831559147f708b7123c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    903e49edc263baff34f9a0781386867d

    SHA1

    41a29897940b555a7b2e74b3a71c8eed8c034df0

    SHA256

    d20885e46d0628dafd1982ace94757adc3e4068950b396304bef5467ea0550e7

    SHA512

    8005e0084f525269e8890e0dfd6bb0f00ea7c678963e389496b796987dbbaa65d2ebc5ba27588bafa94420ee5202d7918f3b86467a12c553db74e8076f0ecd64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebf7a9cc32ed5da02d68338bd96182db

    SHA1

    1c14a6e5a8d18ca03b289738102790919bc35d73

    SHA256

    9e8f495fcb455a507631da5e5d126aaecf5168f92a9163205e171440dfd60789

    SHA512

    1bbbf563fa81ce68b020a0a21b1f868d14c094114159ea12f6a79d83093781dc74890779da5059b5944e5fe4666c8c76c78ea73d153a20af52372a21b45b7d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    025b31a3301fe75aebcf88932aeb6804

    SHA1

    7fa3416bea405075f18305f5013d83081cfb18be

    SHA256

    f19e50b54ad7c912c35ba323654dd13ae17709121090f4142839b38fac3ea204

    SHA512

    b8bcd10eb8dc1cf434f46baf530bb6a5acbe3abc3143a9086d569bc8486214d94c2e4da4c5b6d86c72f82252556294c8e559d6f8b27d541394b2060f0e3d6a38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d4145e98e846656eb50c94ea143e1ed

    SHA1

    b34ae76cc381bec5168c020f397040dc4274156e

    SHA256

    91558ff73267274163f5ed43480033f0fa7e6db8dc39ed6f186282f6aedd10b8

    SHA512

    487c5a58ed648ab432fed0e575920bfc1c8818701a8dd5d0eda0204623f5c319a8f055429af074a93f52ddb81b163c180ef7d01b5e751c59a27911618ee5f21b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    091425e64d4eefa881d39fdef65528b0

    SHA1

    60c7baa82556ef9e71c00eab8a050ae9e5bc46d6

    SHA256

    c1d8cf2f705dfa6f8851e8d48f35262864e2469058baf9cbcc4f1b93fb70e297

    SHA512

    efbd11c3ebc5ed3744f1a3f4271b5aedd86b7ec4a9b6054d757d3eee396aefe3e75c5e897b69873871d8209ca6a5c8fbd75c9ad81097fedbeac152e9a0dca79f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    533d011f09513458ed7849a8c582468f

    SHA1

    cd999507e1f751156159678d1688df81254e6420

    SHA256

    26184f209950457d71094a9024ed448d7c5c4d4f52cb87ce6ea63cb4c219298d

    SHA512

    1c9f184cf4cafd75dcbcd369dc2a0f00935885b7e79a2f7fe3eb077102d8dd86f3c4ed14ee87b20d4ceccd154b0e129b01ac533c70b962ff14699a44343c0649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b5a2bbce7d88e99627475d307ed3456

    SHA1

    4f4ccc4a074899ab4c618930129f8f92756adabc

    SHA256

    8cae0fab4add10ca4031212ba0809b625de5ccb436423d2113b4afea6e23b9f8

    SHA512

    bc4f66356d1bc478eae849bcafc3c96be5f9121f0be247b5b164916e34989ec0002ed3637fbbaebc9bd63ebd77eed3685cdcae78dbe1c46c10f7b1a453dbe7b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2105e1dfc6d688b3853105a1e710aa4a

    SHA1

    3cf70fb8e7daff7b1d0ebbeb9fbc95fe99bfc5cc

    SHA256

    0417e087937331f5f714184c0130f66936f13b978d0983956bbb1180152ddecf

    SHA512

    fee955d24682a6d3e470fc40dea114fb43ef0f30e5bcb24a78a02f2891135b515d5e2dd612d28b94e1580a137af8a71723023e9c73ed1c36c981e75757ad3de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07fe34a96c72d2cd8d788a418d0b8bce

    SHA1

    41027aeb5024134170dfd5ba5e096af726b0eb07

    SHA256

    0bd26064b6a43334cdb6f660affcf81f1eb94912bad8adf90a172cb2567c4d8d

    SHA512

    ee788480ee8ac7b4210b6b5e58b5ceffdb9c1eb678a40f60bb343a15816e5fc91155e783e6ad6a07d278ef8d40c3ba56bcd3cca0dc114e1912d7b068dc3e5723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d4682eb99b6383e699fd6ffa0586100

    SHA1

    dc62f402cf5809a884bc946c5727362c86528e8a

    SHA256

    ad402621005cfadbc6bb912e50bc16a7bd79e59c958ddc700e5723d56cbbe7e9

    SHA512

    42fef92df4a1c6e3a913cb69da34a922d58457ee79d5cc08b84488d2d14ee0e5c46011f74b365ea6021e5a60a5651745b276f36889770cba994fd17b53f1d00f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    520d858e61573485237eba604f5b041b

    SHA1

    b5970432393bc5334a1ddb0e0aefc322575720a4

    SHA256

    cb62a1e0c3cadfc6705b336141e87239c02eef871108e816319854eff7fa5306

    SHA512

    c97d5462204426dd11dbbf7111af2d01382f8c5a5647464f8b30fa8c590f6a56e883b85b452f1e48eb21e7429bb6d3ad1015fda0006cfeb28a473fea7e7e085d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1ec2c4d3ace13230c34727450d45e6e

    SHA1

    29f1afea197bf230ae233ff0a3032a373cb33d37

    SHA256

    512e3c0337b7798616a68e383eca8fdceb13c2847b8d78e61655988fbe626882

    SHA512

    bea0b8675e2fe41828614321620bef17452e1c56d82c2f23f3d33c1ff3470486501ae22322f487cc94a80c8b8a36517fd19d7c1e56b29852fdd75b628fe195ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3beb9610900be8eec8bb091c84727183

    SHA1

    fd7b5cb1812ecd5ef5072c983387502dd217606b

    SHA256

    245c2e966f86f5b699899e6b55a0c4ed4298a6cc85520d36444dda659f800eca

    SHA512

    78aa8ee85484303d6001ced5068c5a9f330000926aced1b8bd6ec2d7bd5f62385481b4172d75e060933ea4ac77b5f827329eb43e670bf381eeb4d90a2d259bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64d60cb320beb51219b891d2aa1e1686

    SHA1

    49d190086c9b37720e098a04d1aa8ddd1603af19

    SHA256

    1360903ad248b929c54dec025b800bc7d95ac53966d2829008fc5a32f7a2715e

    SHA512

    32962c8ece1595767c2ad224125e5a0f77fc7035dd90b8996be51467321d2cf5ad77d9029e400bad260e2be199a3e6e36a11081362248033aeb167910c11a2b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5f05e58a3dd750102206544696d2a9a4

    SHA1

    019804c8930fc2da3a6f71c09d12b4996d72eedb

    SHA256

    0c762173dc7bc91cda9b119085964aa7f98b6caa2e5340a5f5bd7c5e675b4ce2

    SHA512

    fba8d10909e56eeb8da850750ec6b4c5993c96299d3e790aa58d79fb127ce82007c890694760274e7539facd68aa34fa1f3251a6785d48757323122efe88093e

  • C:\Users\Admin\AppData\Local\Temp\CabBED1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBED2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b