Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 09:56

General

  • Target

    959b0dfea4e9c1cfe68469c2983d6fc8_JaffaCakes118.html

  • Size

    42KB

  • MD5

    959b0dfea4e9c1cfe68469c2983d6fc8

  • SHA1

    fde991496590da4ea6ca58e5d5134e54e7805110

  • SHA256

    df96f3a2c1da561302eba4a33fa7eb7d91624f27f8a408ca445e0fc6ef814dae

  • SHA512

    c80800b93ddff0be3149365d82e967808be9202a1c2d38265e28d3973bee9497f8ecfe12f3b39a2ad3e4e5ac7b610971f54c703125a60ef6fb114ae4847e6aef

  • SSDEEP

    768:fj6zqLoHQcVpMk0j567S9p7b12ow7T42SQRIhr:76OLiQcwLNrbw7TYr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\959b0dfea4e9c1cfe68469c2983d6fc8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9edee963d5f6a59db0438d101ca8b039

    SHA1

    13a56011e3ea12da5e020db067a876dc295ed9cf

    SHA256

    aeb7b13a3c583119d1f8d7d9faa199e4d28ceeba8bd038b0ead8c476a77f0bda

    SHA512

    9c986390154f69448cd893803281eaac6ec88ba2baba0b412e61fc6f834835beb7fe8e89dab1cda163e2701a092e06634423425a7417c147d2b507c7c000fd07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc74c552a369867624de6711f2d61269

    SHA1

    0e368ed54a4b978d41c24d608f0af23cd0b31ec7

    SHA256

    771196367e1d886d353a11f7490dc5f43abf85d0eead345267a566fa2ac81a63

    SHA512

    bd1d92e70db7ebce2c3c18b753ac436da341696bc2ca5cfe300bad608585ca8e8746256aa1b0262bab97fbf0653803eda4eb4458cd7141b5999153559a50b03b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01192109cb895a7d50cdfa1b05139a2d

    SHA1

    181fb0bf3be3fd4355a897ddbdd15cdfc6a3032b

    SHA256

    d9b6344eb4fbeae6f304312aab0ded45415d0e6355beba0ab11b934c54479774

    SHA512

    bcfcbb3282f8bec841b343aa477e483be2f58b3f3fbb6c28c6cbb75a9c309d3422a764f6df7421d1ac5e2376173270979db46a7c27d4eb626497e2d9f32b562e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d63a4e3dfd3c4a40e35517de49f5ede

    SHA1

    80826a308f97051e55d1c355f0ccc3e4fc8f962a

    SHA256

    0dbdae8eed2b0fe6a5dcd7643ce1c1ee26d9f8d255be69d6e5563d106683a099

    SHA512

    633e932e4fcd88e6a328b81d73bce7bbe8921759d62d2148979aff52344f02b425c3e6156ea9a31985652810646a7d4038376eb37bb3737e936c04bb272f5c26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5dd552d3d0fbb74efb8542a12f9200f

    SHA1

    8abf3ceab7798c30f4cb6df61c70f5ffe277a9cf

    SHA256

    2ef2412729d9b95c6fe2ab14f1fa08ff9dcd994299ab873914d54bf6ef8e5bd6

    SHA512

    71df0b5e495eac3890c394e857ea90ad1d397788b3a8420f6c08e6a42bd84fad8cf92120b23225887875e50399cda24d33d57b41d0611aa843329a8ddf044d87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    840c57d365f53e6af0f843263c7fc92f

    SHA1

    baece0571fa5d074f2f7aeb1dbc54c23645e5f5c

    SHA256

    93db97040e5f5f819190a6d682c2050bf64d56397b1ba2036aa5b880dcfec30f

    SHA512

    fc614220eadc53c72627c6e25df0ad6a17cd08608e93415bb13bcf4424edba94f45a51c93e959f166c0782abbb6e6dd1e90ee4732a3fef9971b07b18bf8b07e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45a35700cd0ea174806ead72db2c9735

    SHA1

    9012953f835e1aefb10de5a7bc16aad7d2e2c9bc

    SHA256

    3be7865e4513d86fabe7e66c8c179c61b2dbec7647d6f573b4bdfc412098d655

    SHA512

    487cc297065873aea26606296737f9b35039c578f3f613d88935fd5116f960b6d5f5ad1f8b397ecb0e83df21f6673abaaa21b918d866986903450de2499174b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f9f522517d09d3024065e84de212ef7

    SHA1

    cfa942f6f31b61d67e480e29182b2d9951949526

    SHA256

    4fc9f02e688aa17de785503670843827db7c0d7f5225ac762a27c2f2946e9b6d

    SHA512

    0ffa1fbeb6dcbfb38b94b89c908b3294aae7c142ee2d7de7299abcd0edeeb8b4ea76e7acf720db7796a162d07407c8691f27295feb2040aabb1c4c2b3a1333fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e417350ddbe84783d1fdb316dfca91ce

    SHA1

    c9a6c73f1a0a9b002e43de6e5a82b221729b056b

    SHA256

    b13ca8e57906cbd0db9550cbb15a8516a6b53be670a715c363528cd4209af1ac

    SHA512

    3afcbe505d37b5277b46b0c0f2de6631f1460314b927dcea487c19edcf5774ad4955b8bb6488a0f4f715401508cc84747faa6437e7b9494cbc175c61da70ce41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bc0972e04ee24d11f8adcd4eea55e10

    SHA1

    3a2d9d0213c1acaa016c6fdad77941b3e27376b4

    SHA256

    7d47cd96201c84f4682105f630437dabcbb3cbd711faa33a488db7148d6ebc18

    SHA512

    ca21069e46157ac6f2144f0fb0ae1b38dcfb3865188edd7f0f3ebea0a1c1d6822af281325da2730dead6da16a7c64f7bc98ab6fa418b0818ea241b3594f67303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    306860d44480a77039cfbf0bcd04d553

    SHA1

    e8f8802dd1022c863f826ef8ac7817d904a54636

    SHA256

    a25e304c852b89e64f7b7fa2d83fea793d3f79011784ee0e082ebe5034f27020

    SHA512

    0e7fbdea328871bec68c49c2304c2a369d662bd9a2f9df840fa902926967d432b5f44465da7b2f72466caf1474f4974b33c2b0bcfdde5a2c6676a981f672ee39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91de36bb10861925aff41fd37a7d952a

    SHA1

    03dab2da98d0a1fcddd56320488b42776f909a8c

    SHA256

    aaa239bf1716e42bdad5064dd14d440581beefb7ed293c474caf93664d803deb

    SHA512

    929a21176beed466121db66e768c04b2b5ebeb1ac1fa6dd0a3ba7a14ad9b1b059cd3895b822690cd5704ad041a5644e69259392e9fdb067d9073c7ef9cce42a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c248be6372378c489d61126d5eaba85

    SHA1

    02ab363552cf45ccfe5e3284150d4f4b39a8e5a0

    SHA256

    979df1968b97dfc6cbe10ef0b917273e3a712bf1c0a64f1161631112d0afe80a

    SHA512

    0cda980bee56c42c917b9468d3325150b99bba64181246a74ce4cff24ca2e9eb9c9e1fe886fcbae6692dd9d1e1bfe4d09e751580749f454c8aaa64e1ee8eba29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01bf8464d2236023c099eccf4a6a96ba

    SHA1

    425367bcda7a8bbc34e6bd88c0331d72e8b64e02

    SHA256

    5d87b6353710c10494032e5d7fde92423089f0f514b6ff60182d03da6b0541c0

    SHA512

    700f2af56364df0d937ca2cc081cee7b80516baca64a4de3474dd443f39c9894858312c274d7e57186756a964d6408f4c60c85060ae7f0242a3f1db3f3396178

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0739157f700947d3434bedb4e4f23b7

    SHA1

    ff2fe52ea126579cc608cf09f2e1c384acefe532

    SHA256

    7cb7d43d943edce40b1508cb316200290f40fffcaee1231bc17d8ac2ace01253

    SHA512

    c1d54b572239423d97a0e4478650c0bcc5c232168b9443f44bc3e238173b66662bd4f94faac20ff5bdb7a4848eeaf8a6c8801828781e3ae07f780a2b266e094c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e28f7fc88988e8b198593adbda3e924

    SHA1

    e13fcd800f990d258c38a100e988ed8157762898

    SHA256

    83b00cd1b3c1b170382faf6c9023e4da23e7bd2bfebc8b738a331dfa795075db

    SHA512

    4751fd092054e655aa8a36cd756902a07fa0ee8c135251f0cfe68dd8582c6ac098cd0539c8bed8f402fdc3ac5d6d263421f95adadc309e8c70795209bee61680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bd5db2ab7abc3b71357e710d0be3886

    SHA1

    61836cbbd58dd1b9f9f37f75336425dc27dca89d

    SHA256

    db2ba373745530916ccc4522744eea177840813759254440378825d67ebba8f7

    SHA512

    80f7da636eac4147ffbe9341981da1b579ef10b49426f6ad129f3ac633d8b166bf86f5e971174d85cc9b54085886bf70f4e03ad59a07d163176aba5a307655ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d0b5fc5b9e837cdb0daf42292ce3c71

    SHA1

    aa0166f974f869062f4843516b6415878fab015d

    SHA256

    fc4b1f0c59af8ed8486343f45cafa131d1a27e486010e48383d400e3c2b2af2f

    SHA512

    772deaa4ae2663dc875b233bf227cd9e70e21c656412bee41f4aa7b419aad1a7d87f82afc8af6463c06169a6e077555db1eb407659956060c36d8cc31f796077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9c73495bc46d226b3fcf2d697b60f88

    SHA1

    8a5b8128a4cbfaf95d95f2904b6e4f1e6bddefe7

    SHA256

    4607d897207ffb9055fca9d7035616f69080930e7210a98eef601c6c3d588c0b

    SHA512

    bc893d803676082cbfdca90ac7f24bfc422b73aaeb5f6b62404f5344651859758a35f523f2e22fb4f95025c5dac77731d4655ad7494334717407ee2a8b13e14c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ead70be3eb9a327076a2b1cbfd8d5859

    SHA1

    eef0350260d771b444abd035b4cd51bbf520982e

    SHA256

    887b10063554a33e565d06f47876ac1917baf6ce9a44f76e3913ace98e5ed879

    SHA512

    c9afaf6f4fde01a3f80ceda6aff68d710a62cf9af02e2bb4cd2fd08ddd906192b3519276500b98ead5fc92ba66a8190fe6a0afd9c9a80c2fc03c1bbb1575a999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faafa54f2b94b78d74aa96e47153eea0

    SHA1

    70b66e347dbc3ef322068c64a525e772e03397bd

    SHA256

    caf359eb20be8d09ad72fb44de03860f28ea243ec8ab6d706f0b49b7ece40266

    SHA512

    9bc904b6394732c28f1b2e6aee0ee8f37e3d10abc08a71ea10a9b1bc122b6d26d85110e650c53a84077feb66ef21baa23f3677f4160ac78f25b2c1e6dfd28cd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf9cd1775ffecadf53be35823a44abbf

    SHA1

    527ccb1b727e882b7bd77a04483b469db42d3e73

    SHA256

    8780ee7344b2979e122ad94c26e530f73418417cc3f71aea8ccfffc3d63db1f2

    SHA512

    a78d1011e7f72d2b35c30e2e01f5c49dc36af2acb0800bdec1f63c23eff471b6d349794c4e8f639ed27b632f31fb29f30314257861076c3d612050825cb7bdd5

  • C:\Users\Admin\AppData\Local\Temp\CabE74.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE87.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b