Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 16:46

General

  • Target

    96db64f6756282b16d9506fb8327b3a3_JaffaCakes118.html

  • Size

    120KB

  • MD5

    96db64f6756282b16d9506fb8327b3a3

  • SHA1

    97faa5e811744d9cd993fea22d132077f5ed357b

  • SHA256

    4e42cdb85188146489741275b9503dd1a24f6044946261cdb417ff8e602772b4

  • SHA512

    45c9ad81ae668499cdd3f8747456248afa93e2f381d85c3ec710323a9ec3edc01753ef4ba1cedb702821dfaa584d4a1b06cf6493db684897afd7487da6425d00

  • SSDEEP

    1536:ml1aYyoln79WjlPaZmiGEBIRAFuBGyuEA:MaYyolpelSUkIqFuBaEA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\96db64f6756282b16d9506fb8327b3a3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2716 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f60af5853a73a2e9a908fdfa31854760

    SHA1

    557ac88b1fcd1105a2cec0fd2d714f9a79f2533d

    SHA256

    2cb519d3572fb1ed31bdc01386cba95c3348bfd743842d23167d12db7bf51c1e

    SHA512

    9b9ebb754e4b1b3f4f4d65d6e450d243b96bd7434a5b760162b129044fb3d95eadb0b47bb31b1e452757419057ba503d84fdcd094d33ecfbd1da6bec48f056bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    530760cbc4a26d17e969ec9f9ed9c027

    SHA1

    1c84cdf736ce020aa03d085f9420b6ba3120c535

    SHA256

    a71377e5f442a30f0dceed338438d75e617a77534927aabf6c6e7e958e7741a7

    SHA512

    699821751d4121078d4edd021670f47be596981b4f71b81a2c9440fd0527ecd50cdfd56887a6ec6441f2c4da8fa04b9931d623f0ec246e4a9d758a330dc74f0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02a7d417d430814b94c41b34660c72cc

    SHA1

    14ad814d462a3fb2df7507d732fac81ef5020f50

    SHA256

    2c76c7400ef5ab9537d1b50d082f098b17af2d9f9a55cf10434815c6b3b7b20e

    SHA512

    0034636aa6e75e8b436150d91e749b8a846e9ffe58d299e23cf3edc42915248e35cf37e0790b169ea534807e24b5c9e743706dc43347cb0b9f3fa1e47bdee1fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41a35af2c09fa98b21630b0efd881eeb

    SHA1

    44c77a8f8afe522f08010d92929ca2d5ec09f180

    SHA256

    ea9b55e385eeb9eddfa8b955fcd2b5e4e425774b93331238fbc2148d724e4288

    SHA512

    27a92be99c2104f1306610cd00ecfcaed0dd947044c2c927196ccdbe6391945a2be04b96823609d43eb397bcf1981e07ca485dc0dc2fc254931ddc01b23e9e11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f4f12000334372ac705baf7993bb58

    SHA1

    817966b90e705151e79dc9264179069607964b39

    SHA256

    2e81924fce948ba304002ab41856d720b818290ea5d9a922e12b6795430b9e43

    SHA512

    58f51f34970a76ebe24c62f190b356ad900db878097cd6fa8f2c80f3dd420f8163d4939204366da6e9d1fac2701b070d247f462627a40951ae5600e6040baf4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d685ffdecd7df479af282aa50f56f2dc

    SHA1

    93c1c415e92247e6e923c87173686cab90c7552a

    SHA256

    ef05733443158cc1bdd89f70638236a22a14f770c2daa66447c592c3bc6724da

    SHA512

    0fdf11b5757b98ceb1fe6228f7cfb03b256464a282be0d89c1082b21b5403d6ce2080cdf783c8909e927299a3c4d6a691c6efec52907635d0bd2f53344de5305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f27acb8bdfffcb0fe8154e06942efc0

    SHA1

    a20ed0813a69cb02e3ab73f91e0a2aaa33118678

    SHA256

    6dd36ed2b2074a16dadee302f679a2286239c917fcf2f387819d639b2d01a677

    SHA512

    adea8e1a74c08202dd32ab5a7a062a58949b010d49f34f059753387b28d3331ce3de0e9226e7edd87d980b6e041b5aeb8975a250546b37504799675926d94e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b04c04248a4ef914f018e89df4822be

    SHA1

    dd101f2d52289fab79ab2eeb7ca92ffc4bc33188

    SHA256

    96272d52ce2ed395f8f75274683ed3b3dd34e02ceec21d3023457f149b04b23d

    SHA512

    65d1d1cdbcbd1fc7e38ad05d27b078e669df58c5669cd0f56e4efde1aca90368045aedcdd08131aea99c6ae1f02957f75a3b701981ba81d35538fb125a764cc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd6bdabdd1d7c779c2bfe61b32847f7d

    SHA1

    f9521907f6dc48df258afed0aae4f3a3f5c1b2f2

    SHA256

    cd6929e816e6d8d227e96d28c32f04ed66a8bf74d2a9e2608b89b201b08dc603

    SHA512

    ddd24fd96068e0c58e38785e985dd2b5e4fefa39f5813b39f4fd20ac5b191a8444e205ceee0f3515643da8468f25ea40e945eadaf06816881a80cc62af1ce6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02d3ad8dfce5bed4b9c893d59289f84e

    SHA1

    3c83ec80afb1f09fe0760f8d2191cc37962c0ff8

    SHA256

    38854a48b319072c3d4feeb4fa086c40f3e88837d1c5129fed8de32ec5c2b773

    SHA512

    05bcd33b43ba505825109451cf0ac12e4b699b6178296ee8b321a50a72a8fd16cda3abba073e309ab3ba25305cb8974117869c26728228cdf6f0c8dec40335d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fc23001f8f5c8552eb72b0d9f3bf6de

    SHA1

    e4820a58fb0e3c9b62d794538b43535f919c949d

    SHA256

    d4841df7b7e37db974a5cd34c3b22a37ca5b29b3c841c0d2da04b50e452b5b0b

    SHA512

    3f2099f66db447f83c00a7d2da1e5f645898b0d675df75ba020f2fda99e25f3b250065688ec87f6388af4021df772f3f76fb8bf12a4ea63dc3753af6c7167bdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6db916bb49029c6a2e03da3ababaf67

    SHA1

    349cacf01fcbddb704858bd21e99f187255d99d1

    SHA256

    b088a8a28d9629f45ec382a7fa46f4effcc86aa22cdc2e9344f7c27e69906c2d

    SHA512

    74c9200bd223d522c4ea088da536a8cdba056be3ae476c6fbd3ec12e87389808d7169e4cfa4ada591b348e26d80d84d8e02dc39aab4b752075164938059e6862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd4e3a7f7f6c0edc2cd4caeeffb6f043

    SHA1

    9a46e593780cde34e1a2738521b351d085f9ad81

    SHA256

    8c666b4d054d36539be80711756a7ff8ca3d7a44c49745ebabf45c568b5136bc

    SHA512

    d081ede4624a583602e5a3b16fc67cb3219a8a9c3539dd0ba5d3a846717a3a698988e017aff985c324d877151973e99bcb64c2a6466af00c488a9c44663bebf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0065a9f5b54d802d7b432dd6912a62f8

    SHA1

    de9e2c473ef87c5836fc9c6ec860309002fdce72

    SHA256

    3a0cb867f9eed3c785fa70e73ec36f084c1d0d5afef07721f79ba252e58a857c

    SHA512

    757874b10048d33f35f85952789af0e25eae40dc50857bd5bb60b36baa2a065e89dacd31d753e514d25d5db28fc600cddf7f01cadcc172d3deee33fd7c7aa9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    465c12e2640291a4f4df082757ace84b

    SHA1

    fae224ab80e5c9eb620210c9abd400ff2fbc3e02

    SHA256

    52458ba4177cda276fccae3bca57187502200f3029f362718a800eb99dc4ffd8

    SHA512

    220414a64aed03b9bcab5466325846bae9b8f391cdaf82d26b39f506292800bd11e83756127d373342c13136af72636a296c16a07d2f857987c4282cda8c21d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73e0917eedc47a685392f98e5a09ab74

    SHA1

    140a0eea52c0eb5a32bb949ed11d55b95eb1c0b9

    SHA256

    bc40f170dcaed1651c8c0842b57d7aa3e426312fccbdf1d6e53c9680aa53e0fb

    SHA512

    14123677c35738364449604eb104bb1e958ebd177778743024a06f7bdb5e2c1ea633177860f5e607d3d8e9225bcf3dc820e3cb0e17a6a633be6768a0a76a7604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57e06b0e968e281ce331420f4afb83ba

    SHA1

    083cf1e84ccf59affc54ef4bf02f03823c3debd5

    SHA256

    bb4d7f4e3795f05880d35097192a83a8b6df84faeff91f9ba0ed0251ea1905de

    SHA512

    a358af5dbe5d7df781f984278bf6ba4c9f608df9c0f71847330bc219de2322359f1f9d954d5cd3e26ac425c68820107e19ba5700ecc3120fe5085c247e1e3940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44b472eb994e8790c0a28c5cc210619d

    SHA1

    4743cd3db43c8c2e7e2d0063b4529526398c78e2

    SHA256

    29fd765ac7dc03b42c6f9dd80df8667acd6286efccf71b760e399c5373276ba0

    SHA512

    1af5bb880cdd35f5f7ae27046a2bf6c0e96e64605a8c55faa06192eb72fbd9d8baec551b174d26d104e9302deb0a947e096c38a57c37f4998d704d82b18fc095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    024078267a8f3329e2104aea8d396bbb

    SHA1

    4adb30a0d90aee4eb4854c93c11333ef6d9f72eb

    SHA256

    64a1f6a05f12162c02f0172f9b5184644b5a546c8b712ee553a1b06553825a2e

    SHA512

    f3d26acecd19164ee71d65573b36798394454d54126113f87415ef9434745b7efb873dd43b6c0174c124fc7d00b6f2f52d31d92fcf8eec79d3eb6d7933f462e2

  • C:\Users\Admin\AppData\Local\Temp\Cab28D6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2937.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b