Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 19:30

General

  • Target

    975faed86d60cef27378dccfbd359777_JaffaCakes118.html

  • Size

    27KB

  • MD5

    975faed86d60cef27378dccfbd359777

  • SHA1

    7dcdaba533eb2341ba5233821d0283698ece5ffa

  • SHA256

    a3128ad75a2a43adc1e0b128d3a64bc2c91810dcd0845c4787296a04c8f7c320

  • SHA512

    78de37e07233ca0a3f15f79e6754230102bd463272e0dd2ac9d64183536de4cd8b93632a606298a66f1e5e508ac075562ff0e4aa84c9f3e53aa8d7851040140d

  • SSDEEP

    384:Jh7n24tQBv8kCYGDZc7uareXab3uov1LxdaDjcNJU:Jh7n5QsnDZGuareXab3R70cNJU

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\975faed86d60cef27378dccfbd359777_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2408
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_BE32D9F1882B93E37445F58E05C44495

    Filesize

    472B

    MD5

    20f29d79156ce6e076ffc03423170212

    SHA1

    42848421099a36aa9d89589eedaa66d475bbc3f3

    SHA256

    f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

    SHA512

    38146f4ae6f7b9a12782345fc8e25c3b4226093040f251d7d71bcce88062d38d09406dcf8dbea5af95abca61c44a7160ac9fba1e96baf39d7536384658d7aa94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6be3b97531dc239e8e208b6a7078d3

    SHA1

    462894a82b610205e60621242c18889e62a5104d

    SHA256

    47506e89ca5cf8032a68f8df16bbd26a4144f9cef2b9fdcb1f2516563b9cf9c0

    SHA512

    3c4f283d39298e6ce9783edae3f02cf8055eab4fa0b913de9f84b0a8e13c34d245cfce65c8598adbb52d8f7a524a286f6cfb48e75024a29fc9cf75f8875e45d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4eff820cef4bad883911d447ebf4d46f

    SHA1

    f82e55d6be8e50c02eeeebed410418999a3f8fe1

    SHA256

    efcc9c2b145dc01e8e22ba067c690a9ccbbf32caa6bf51e3a92c42a0975a2804

    SHA512

    dfe1af60f87b8204c63f60623a7d50a72266c1dd88e0e055156db2139f11a75bbb4280626394246081a1eea97712e08e5f147fde9a26976b1aecd7bfac1c153f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa3a4f9b32877f29ddd1e6102ebd7cbb

    SHA1

    cc316131b0071b6098f02339d7b08675cbaec3b0

    SHA256

    71d4589e4acef05fd3459a25faa4d14c2d5a00d85bda2c8486be5b439c56dee8

    SHA512

    823779892af539a4838a30f6f7934459b2bbe4d23a13e9323526d9d6549087c851023c81c56d1559bed494985ad5aba0583be81bc6709395ef07842124db8f53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f76c3cab87af339b038d98a14af0192

    SHA1

    7cf753023b1887912b53f0ad033eb7a9af338690

    SHA256

    8de0444c88d6bda23132ea36e5a7cd60baef932a3f5bf552d01a459dc623149e

    SHA512

    0e1f1dd3ed19c685fd0e46eb045161e57f27b28c350c5fcc81251123beaf323ee182a2c3f8595d7a654369dd52510425c6b1742fd6093f5e556256e981486d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d990d8fadfd7c29acdc589656fcb1267

    SHA1

    9e0abab55f017c2325d1f230d62b4b6166ad6788

    SHA256

    6ac8817c07a25dd476b56d07af27aeec373ec9149a09d3aa2f098ce6a829d8e3

    SHA512

    1aa55ffb8748d9f65a2a16d87aeae3e690bfed2f2c1e3a2ec17bd4ae943f910fbd1915ab57f9d329f9fca4631ac946d08d19f6b66e173bd3c85af4a2587b13c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dc16a88e376373cbb3886a15e84c5f9

    SHA1

    b7f69402b4d470981e77506a5716c5c729926b46

    SHA256

    d4be5754c264c7fa79de54d70af8f442b0999b6d7616651c7924fd83cffa5b53

    SHA512

    79f9ec7904c14230aa79ef877fb3e833cf98f045ffca054d1062d35c49410c81a05d8d4c7fc710e1c7b7c01d4d64902e6bb30ea7ef5a0095b00ea7603cf1467a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fa68a1d9ce7668fdee4da8649841882

    SHA1

    d3256ff495fc6823a076080691783d6f1ed8c991

    SHA256

    adbaf0aed81f7f75a5a4934630488e7df8275b691483dde1ad173cf453a07b9e

    SHA512

    d3ae8c3925276f7c34776782346194245b2a381df41ed167abd06a102fdc95e498d72e1e29a0b640528e2dd86e33646edd8e0555e09129329c77be3fc4701a00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02493df43c19b807ae8768036f1c2ea5

    SHA1

    a484e37ecca281e92ce531b715d13561ee91aca6

    SHA256

    ffb8ed739df5eed50267ae5d426c0c81982cf198a55a0b99df9fb45c278f4479

    SHA512

    8ccb551bc9cd5779140a8842984ec1dff4e731c1daba2fa53a2b2e9170306a07bf4d2ab66d90286144f8ed26aab49b03ef6c9a02df524f6ec4b0b9223ad329d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4954973955c9423d563ec0c60337a9e

    SHA1

    60d76659f177d1f470c148fc1ad6521e682a9482

    SHA256

    9dfdeaeaf198f2fc6fd0cbc33111c130c96d7f3070662f3b1b02214e14ad0670

    SHA512

    d104a207a277a72be36b6a38ff19f6ceeb3734597e7cd9dd1f04925e999d6018300bb9c942bdfbdc0ae83582631701860f8051ae10675a8bafab63584d3e9ebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    524b17ddb358ec6063122058d392ef65

    SHA1

    3d68335563a6fdda6de742dcb47b84294f6e0f67

    SHA256

    976d1625a89c7a1c004992ab156e8488b73554e2a8fd5a869c702c3fd23c1693

    SHA512

    2722bb6d9ea494453bd03d6ce96bea5aaa8771e8cd52717b2683c4b047c615381cbe1734d0c18281868c2323d564e1e001e7966399363fe494baecefa84948e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec3c097bcf93afeaf16eeaa55e276a2f

    SHA1

    ffa760114c4d1271b91e617ff3ff912865be5cfb

    SHA256

    e2ade9d23bf760e81bb4882461a604cd04ad569d83f58349e8f94d8a6aec5444

    SHA512

    ca8b62c34ac48703905e44ec2e078c88f03e3ec221a459bcfd69d9353b87cada4e78ffdb9c3f7248c2665a8123aebcea0c420b08f2a06316cb1a548c24cdb127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    599a5b4f39e3e66b20c9feac745f1e43

    SHA1

    55bea924e057c08cd862eed67ee4130169569e91

    SHA256

    608934692271285bb63e12b1096eff23fb4bf01e59cd47ec5d2074c7c57cf1c4

    SHA512

    e9607ae5c40cff6f1789c9922ba064d63e61ec6da1b916f1dbbea8d82c3465abe9d80d4b76612944d054719e9e6ffe8664237c1336b58ef6d8516043b9e2da8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37693566e65ec113d43fe611a5b2c4e4

    SHA1

    d5bd06b6f572244e6739c2c371a2601b1b0c89c5

    SHA256

    58d9aad37f6eceed77effd819e358ac0cf4662a30fd62d38594ecc24dd4ee726

    SHA512

    5dc66bf5e11d3e049c34eb519be6b5c5318639c27493f5775e898bb4e76dde05781f54ab55b272a8705f024d87af9d20a3252975b05e2777fd9f956fcc2ed69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e8e0d1c911731a100063810197a5f18

    SHA1

    80ea2bea3891725c2b0c5ad5953f2f7a04243558

    SHA256

    35c494a2fc5e29023b3d4ccd7bc28741c46c25a578950e71473fd5ff9bf26f16

    SHA512

    0ce51328fc37e36ecfa5d9d77f6713c18550746714463547db008fd66608534b27ce466189dbdcf89da8c0467099b8b847b6ba0259adf1ef2b8f6578df2fe586

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdc7a7895923ac6f21bc7c46f868275e

    SHA1

    3a85ffa4c06e4395d7547046a089c9afa5de5713

    SHA256

    fc21bac8bb2be86da980e965c145860e211beba367cc0a8a09779e79377fd091

    SHA512

    c5a414d4dede26a662872a1d3f6529f04162f2690d678b65bb79acb4b749cc43d6f716193b3e7cbf0a634c590676043cb76a7565a8852aeec4f93017a7eb106e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41e180576ecc1004f65098d474473b0a

    SHA1

    834f9f1c638603a709fbb62d5acaf8c644044c12

    SHA256

    7608d0c95ecff17f624c425c224ffa7b0c76b1c9a1cd5b80ba117184f7c3e9bc

    SHA512

    fdb5c4ed7b056edd0400b691d90a24453d7383d9314480609effccb5f12c3a72437a0d66305dc71c1e6ed4776c479b6c4ee44d05456c8e187b030af9a72ef954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdf6c99912e5016831824512f12f5307

    SHA1

    788c609f1079306c216bdc43a7f1888229dfc90b

    SHA256

    3290b86b41fa6532b16ec579f1f0707c631ea25da92067a9535928a729825bee

    SHA512

    8d91229367313e8e0adf06de7c7a109251c64c9092b78a3a12b32dd3f5793bdbd6ab3035caf87a351a23780b3454ed40e078f76ec92949d3eb503a3b0eb7e318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0e3182d77fca55a5431316ab608a7a9

    SHA1

    b771a5f0dd884c4105d8a4fe80bcb9c25dd25aeb

    SHA256

    9181935f7dd672b05b97649bc520c7f21c157ea9a3645aee88f7a443467f6d10

    SHA512

    ca3f399624b49eef57ef52253e6d45f71ee38b7059ce8d8e71dfce5ac0b8ff084c7cc4ce75bd640b9979c734956423112d587072ed3b5d19383f78e4d9fc70de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ea96be921b7b8c6c7cf79ec7ce9b09d

    SHA1

    8d977e9c7b639a2e7d2160ec90c0449bdc177e25

    SHA256

    67083ab80026a3a6d5828b7f90c3333b840025b8916d457e931322b07484343c

    SHA512

    cb2d519ec0b6a49772f669d7f7f3b5b2678cd0e758ecdfb4350be4852a9e377ea23b904ccccf96a9c999a5962c24362d3167d474caaa5e5c360b10b6427cd346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6e4f2351e9cf43abf698081bf15c8f3

    SHA1

    2c4801971f79026d8ba36e144fe36b942e30a905

    SHA256

    d71f251e0dce82144bf69f3ab54569cdff20ae1e46a342c60d5801160d147a81

    SHA512

    5354bf39ec0ac18842c26ddc9712819f67e8d5fed63b82b01130c39c636aaa98933b0d7aa36b01ab998d15f8565464becf5e35c80c6830406a33eb9a090279e5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6GL24G53\css[1].css

    Filesize

    1KB

    MD5

    74efe79d70b74d0008472860d3bf84ab

    SHA1

    03e3197e6ceaf32b7db4616858c2923aea7d8f18

    SHA256

    e9c09cf145c37e4d62f75351a3a382f102d21a83b0adfea4216e25811b7c32e6

    SHA512

    3e3d3da34a9ed33dc8898dfdb7e99288c79e383382fe46d49ff36a3241cee36d409a8f311682b00a4d36b7cc139f24498d8744dbe12a63d2a6a28afbfa02d371

  • C:\Users\Admin\AppData\Local\Temp\CabE3DC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE3FE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b