Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 11:25

General

  • Target

    8e8ee04f04c503583e4faf75420bb18a_JaffaCakes118.html

  • Size

    36KB

  • MD5

    8e8ee04f04c503583e4faf75420bb18a

  • SHA1

    85c999b355b0c400679c02c60691ea707dfcdc53

  • SHA256

    5124527a09b4b7e1d794115e3ca9aa22d6c57b029a0761b2ad3c930e87a8cd45

  • SHA512

    4745029d630bd74e28a1865b364d36834d2d141ab3eed39122c0bc9a651cc7663faa293bef10b7606ca536254029b8ce6a8b66554eea278f6b415b5d651c59f1

  • SSDEEP

    768:zwx/MDTH5h88hAROZPXVE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6T9ZOC6DJtxo6qLk:Q/bbJxNVEuCS+/Q89K

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8e8ee04f04c503583e4faf75420bb18a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2476
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2476 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    122b286b70a719a89377da4a6e84bb9c

    SHA1

    8289ae1cb411c7d233246e53bc86a2a52d6954c6

    SHA256

    2a3a1a6fdfc7450fc15a3b65c6421825aac8b9014e1b1b1148f79d3309f8a5ea

    SHA512

    8e9beaffcd915e54a92c363d4cb7863d81e7e19d37dc6f9bc6a4816f5375677ca5350c3620e769c55cce6a05d33b4a79b7b16aeb917809bd9ed816eadf00f91a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28483f8d61e964fc72f16d4da7b6505f

    SHA1

    13448daf67cc36f60080453fd88bf786eac8e9f4

    SHA256

    e781acc20ad75e6caefa046fccad7f68942388f46785c3d122c9da0878523d7a

    SHA512

    b49f7b4a4908c1890fa0729bfdf2a4b2e3be5282b5ad2158f371ad0d5911a8ac70ddaa70dfad2caccf86c489ae0426f0f0a4d86327f44db5f2c27ba5e9b530de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6188412534501ab715f74141a4fe698

    SHA1

    abb8763e5e02369485bc6f6a49ded8044c88f973

    SHA256

    a5377d152f48ae94531881ffdeb67d0c12f8c284433602921bccba6b4ddf4318

    SHA512

    fde543ccd9dcac001ee23ff2ce99c006ca1b1b5a7f9f3b8a6570c6422f162b511935b698b0fb6f527908e861db49f20f4ec410ea229a2c6acb54675ac1155a12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a1c17b718e78dd3c8c682b0e9e5465f

    SHA1

    a8a66973360c20286797e80e1b948d2eb1d3bc80

    SHA256

    b5c937f641e40d2400fc56c5b6a261773a9569ecec678cd01d13ec3bd06853b5

    SHA512

    75b1ba03aeb1d343c4d533575e36fd8da92b3cdad4be0a7b707a2f798ebc8d085dff7e215f10cab14b4dabf2107feb12f43451b1bd2181140cc651f2969c18d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97eaf979ab0e798d323d412a27f0e311

    SHA1

    2d4a4627c6c6a178d479afbd44cad493c1b39fd4

    SHA256

    a0b4c1bef8117aaf8651fe741fe82a5b80adbfcfb227bd959c84174abda77dcb

    SHA512

    daa3722dde821cdfdf0bcec37e35ceb90414761d65a089b55dbbce12d1c6985a275d6594e6ea00b54a4914088dfc675f0dbfc775d0d900e1e0e376526a5445d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    295073fc9e2d61e0e1f53ac4bd3786c8

    SHA1

    e3a1c6aade2c5e5c4f4cb47edbc88e5ff6177be4

    SHA256

    838b885a312ac916441c7190f3261f0bdd8b958ae781d2a9d1cab4645c7b0b6a

    SHA512

    b27e4e42e6253b23e44e77c1b7e652c976ebe3a5f835052c2c1d94570e9c078d4aa7f0aff7719b6220cd30846fc5d17eeecfc77412047a464168c6b2b4ab9a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03196d5d7f01278ac00764f4816b052c

    SHA1

    488bb4630c65fc6a1e9b5f2af974e847fb298b1f

    SHA256

    3b98e1c79b53af0c9307d9f29f00db7d8ae63d79f848d1086e1f0e4a3ece50a1

    SHA512

    077bb82fcbed292652b81fc613ce2205902bd211252a797a0fbc6d26943c8ee23262e9524723cb54d58627efcd0126b5f04eacfed1dc390f2b2f1dafcc9d3944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8a196b6b76e9c559923d2e691073c30

    SHA1

    a07b4730ad04f132c623844f0b9f339d6abc8032

    SHA256

    b26f517802d87d8ddeaace996be63781b7250a1716f9db1fac3382a3b45fe987

    SHA512

    66b8f0b66b44b77a229f5dc051a9b11b5402fe4cb90111aca9a574ee5d5d26c9a0c6393f807fcebd6b17f152d154ac42d0827a8abba78fd9b7839f2d5b0cefe5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d6b46a6783685021367321d452cec6f

    SHA1

    337adade29e39fd3c48ee3ebb1555cb49d99e389

    SHA256

    20206081fd9739b778b490b64c55f43d62a692f5885670d7e9a3d0ef48f8d75b

    SHA512

    b425794633548fcebc22186331e55ffb07c4d86d35d3b78c2b3fc95992cd0687f2ed315abe0cca5bf9d0c725012bbabe7ec6fde716655fce7a27f3d7ccff8a38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2086d9d37dbfaabcbeb4b667431366d0

    SHA1

    196e0f40ab2a5334e5b00aced51ad0717d3300d2

    SHA256

    43957f19655e9e552040848052e4a1134a98c4f1c3f326eb1a755dd4b1fb136d

    SHA512

    b50813a098c8ffe2fcfe5fb8511754a537778be471691065238a142d279f825ee3f1d8b0f1f1ca6e523556df4a4d4866a6e46a6d8128af90baad1322828b803f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9191cd01a32157e39b2a3831959404af

    SHA1

    a6a7f5a894fbd58f55ced9d1473d6830207954b8

    SHA256

    a3bfc6cedea7596d9db753ef32a7cebbd8d7b8d290d7d246d65526268ee0ec72

    SHA512

    6feb13e896beb542e89eaf1021ba8f98a600d95572070dcd20310ca79d602d1c53617eebe04216b1abf06886477c8716a01a889f992978907264db6e1bbe2d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17fda7794b6fe605cf668a801a80298b

    SHA1

    bfe6671c81ed5b9a007629a3a3a79c58d947d348

    SHA256

    a83000f742c185ef192d59b295a2d8ba92b0642c13c898e8dac638d7ccac1c6d

    SHA512

    289ff77ffd621ccd1eed2adaaca6945e340662dc9eb80d44cfb4fb2234731254249030a1715568388c9ef147781bd5d6558d57ff7543e278b424b28c3efc5708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a143ee3d8beedb112ccc977dea16f1e8

    SHA1

    67fae58ff17793c4c14cce40cce9ac81db601506

    SHA256

    a68b1aa7f829380c777ec26e4cbdf14b440a3d808d53890d194b10c15c057847

    SHA512

    b6e20d24c335bae901f8f82867ed31f889cb9cfcf5f127b1752557f2dc17069c36fe27dd35a718fa2ae6bb447e1e33605e023d18ad4229bece890638bcdb4d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3290d506a82efd8dbeec2a409f7248f4

    SHA1

    2cffe4dd1e20abff50038f9b55d9749e9935dc4e

    SHA256

    47fabd8eb637b1fda97886cd6b17cbdd9a63b893ad4ced97f95cd8b6b50fe51c

    SHA512

    c9a66ea82ed5a87473d2a093fecef2ecda3516b52784cf62c8e245c4c83bde8d047c5c49df0476cafed2d125ae31f3945c967189cf49f22f2fdb0aa442f8d5a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bff6c0d90ac9cfb623f7c717e65e7396

    SHA1

    ec729c51d42b0388d4d1c5271bb7b50058b10a52

    SHA256

    46d901f5858c533d03b1fe2ea68142e1acfa96cd392a35346599095c2540e5df

    SHA512

    f768bc258d1b5e991e6bf0fd013fe9237de2658691a804ab17c6ee805b090a2326f63b1234a7b211b28ee4a56af91dc4ea2bcb1ce25181d441c664674c183062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92d8e2dbbe69933e01a5c13f9cf70f05

    SHA1

    ebf255b8e4f964b732f01857bf830c4fe6090b85

    SHA256

    136b03c2295f561db8de2be4e15fab43673789ebbc0e99edc630720afaa41f68

    SHA512

    ae1a94289fc38589689380a34b079049668fbc5f5088e47e810105490cbf26c3e88d94f7129cb787f8223bf22c2de2a720aa075a4f1c62cf8890b17872e1a1ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcddd448dcb09c4d329d5a81e8f3868d

    SHA1

    c8c775fa74ee9bff5ff7678ef4dda57fdeaa067f

    SHA256

    385a095bf5e519d3340b16c2126eb39c0bd488780657c06315c140c4cf7adecf

    SHA512

    273be9797c6de5a8d52edfc519306fd27ecc815d806d61eacc0a0e99d495e1cb6f24171da4e367d16b0569b5fb9c104e9e1b3f6da13b841a48ded69ea55e700d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbdb97a457b223d79c3ad918d0f24205

    SHA1

    6f9ba98412572eb6337619027691d9ac09c4255e

    SHA256

    f9da87ffc8b81d5ef00da046c7fd03b17d5cbc4aa5aab33f3b8aea8a82f359c0

    SHA512

    950acfcdc164ed95c4b00f4aeb4421952cc1047a55fcbdb0d397e323613a718bf38fdb5c9c6a18e47b6408d582210752849c0f95d1a5c82c6520b2f4dceec2ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7a30aa4f61ddf077d9ffb95a4f9eb5b

    SHA1

    125c5d52d17879ef6403b6f1739053c2e29c2e84

    SHA256

    8513b2c877ac3c28e82ec9a17f64881f654f03d5ea866967b41a34dca710cbca

    SHA512

    687e0ddd8dd6d0058ede991436986524693a80fba19d6316673f17fcb1f268b74cf3294afc8322770330cc601a0742f59c2e5af3da4fbd4ef5c61653d81fbcf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e80299a44f880042f73c5798b15b1661

    SHA1

    1095680b080048691dba4e6ba2006884cc070e23

    SHA256

    9eb8200b73e803fff52555188e029d38ee1e7e6aedceacdce68e6067aee05d85

    SHA512

    c1675a65b29fd2c8aac7268fa00591aa889075b68d41ac1d402cee97154eb58207c3f6348b0f14a11bdb950ba13f3e4043d39eb91b6be5e707b660345099635d

  • C:\Users\Admin\AppData\Local\Temp\CabBF5A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC151.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b