Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 04:20

General

  • Target

    a55c3366a0e185391452d19d5910d1cf_JaffaCakes118.html

  • Size

    109KB

  • MD5

    a55c3366a0e185391452d19d5910d1cf

  • SHA1

    05854436415f794d0147a4be50348967b853fe6a

  • SHA256

    1d3bc727fa98d00d7b5bdad883c5260978e0dd2783a96833815aec41c68f6d4d

  • SHA512

    b166e13d545fdcbb914af54aa197fc7c23e03d9858b18095d9dea73da6020ff53a87b3cf7afd9b56b10e1c15c8805987d33281c12be54de68680cce856035265

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fc8odHAOXcL0E6wcZf+SMKp:sG7MLtu

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a55c3366a0e185391452d19d5910d1cf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2296
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2296 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ab1f640799b13044f64c0782116ca4ac

    SHA1

    c6367816001fbddbd6effdd2178507d9e656a2ef

    SHA256

    94f1a36724f05781144efcbbe0b0e7428f96c94672cb6d9168a62a890a7ad4e8

    SHA512

    5312f520ebaa774c82088d8f34674b055204a176440c78a9b4b250df98b9baaf382cf1cee805562d68c356aa9687177f725f0ad43c0b2d82b874c77312999da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1472816f3f38883956b0d78173890917

    SHA1

    ccc765572f3b5f0d69f0cb854cbe2079e53d4d78

    SHA256

    3ac371801a4e9c5f91a0a71c73059a83e91a43663abf72a7d13e79e2e5f95064

    SHA512

    164aa1f5ea8fca2d87206d91caca7d6978e8b3f839a793c7121ea23d0853f68519495098f4592a705bf617b06417cd1ea5bbea6a7d972347267b68ce3cbce09b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7256b9b99d49f6feac5b73316ed38150

    SHA1

    b275349fb6136512a20810e52a42c597aaebcf4b

    SHA256

    a3ef01246121d09ec4d5b5a10a776904f43559324472863adf9a97713f7cee54

    SHA512

    0423796e7d0d5042a6bc8356da374db3faea9cbb647d9eaa5e94851a1d63c93b639b7f272c51323909c093d11d25ef49919589087e2bf8f146f6bf4c7e1ebac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f2ca13fc69aad7243ecd37b63218626

    SHA1

    20309d4e04ff9afe237c9cbb2c1ceb7aa0e7821a

    SHA256

    c0eddbde372f1bcdaf5baf9c0cab46527a17ae9880589840ee0eba6670b5f96e

    SHA512

    4c0463879aa47e2c4a46e828e2a62c12f0eac1e4368b51099bf58eda3e603530569f7ba0bfb0a40fa18802155cd3fb798507fb1522db1319d12491349fdf0d51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfe673cdf02546070717528810fae69c

    SHA1

    883fceb88b5bf846bfab78900a393da342e4cd37

    SHA256

    2e86ba5370aa27336756f2f23d2d2560eb63bc10257c3c815d12951aa9a412ff

    SHA512

    62218a2f02f1c5abb9faba09e28b98f72abd09e5492f2f1f47ff4a23efa0d2309e9b1243d1aa65d9aed7dd215717ec71e853bb77557562753e10336d446146a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    593ddfb9e6fe7ae708af18cc73fdd270

    SHA1

    b27b93e656642e8efde83c97a2f4ce106656209f

    SHA256

    d67f66181fa289df679d50fbea09f7a4c5789b38c69714b5c09e64013583f05d

    SHA512

    98a514cff4d5f59a9dee31994a8e532b10b6e501b05f1c2de7cf4c974e517aab5a678e2a2ef479bd708be3b8cce78735f31465a370152b13b0ebd5e449c0b397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00c750d898dd9b53d344067d0f94a40a

    SHA1

    5ba7b15c481cb743823c84cd9e17d92534d71535

    SHA256

    b8ed2c8b3ab2215f0084a1e4c06aa65a90caf459dd1840e6ad0d0e1471c0626f

    SHA512

    07a5a09cb2ce2fd3f7d7e9ef4b368a254682929bba3a24ea7415e4a3dedb5480d29230decf34550a6d076ad334ca1cb57c2ead35c1e63a422b02cf23ad058867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc13f67b217fa5dae945716893e658fd

    SHA1

    048d7518f51ef478f3c646b960b5b8cd9713feb5

    SHA256

    c1bb7daf7effc0046c80f180ed908e68fa28ff7ab49d3b697e0e1e714e96c2d4

    SHA512

    801c36ac1d9876ca8dbe08123675d0b3997d6d73b38e74211183380f4613d1a332972ccef6d69ace232d42054525797947196aad2a8a9a79089ed5a36adc6ca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a286ef0edc0e6e1f0683ee39ea7714c

    SHA1

    fde7b1dab82c8dd1ad962de7d6831845c536de00

    SHA256

    7c4190152412d7f8329d2186a88e3abd2a195328b547c62b9395ec3937f00d7e

    SHA512

    ffdb351de7e74de92e330d975aa9a5c18f27368caeb9457b55acfa034a813596108c2a29e6c1879a56ae6c679e38a442f50f0a84be5062b38bd723fbfb8c81fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbebb16325f16a415c952d0bed3e7ca0

    SHA1

    0495c965ad095524da7e5e77753063357944dd55

    SHA256

    7dff7f1532281fa672efb4cdf052389afbe24c70556af0d861da79bd5ee4ac6c

    SHA512

    277ca3ceda3f30bf9624eb1eae56bbb986517f72dd29d7592eb4ec034e3af71580a10a28f729fd6768706902bf23ce6fdeec5f6f4512ea5162b5a2fe672ef31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1fe70a7b464e50745994ecc44237f27

    SHA1

    ddeae6e6c895850f23f343e84169a30ae93d6164

    SHA256

    20ff8c8924201f309ad2329700ce64a8c495158b972ea85ac0b5530e6b7f2dbe

    SHA512

    68dc09c7eb2af947d0c16b00abc55c3714122ebfbae7740ab748e52985efd68448c55a13319e9e4e4e2b955368a6ac99f48cfb2b3808f60c757c39409749ad18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7b167ca78029de3c8fe6827fec9795e

    SHA1

    bf0f995112c541a2ea620fd461ca08ae9b775ed7

    SHA256

    b7742855651c9f4a9e0ab663e320ea15fc254dd99dd6ae6428b0af16e92ab5ab

    SHA512

    828e3617d906eb66688460e7e82bb5c4b132244a61796793f09bf550a8401ad35ed553402e071155627318c9de05624f0fc8353621c95516e9bd46f499889088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c2ad9baa937d51c186cbc2336c4bf04

    SHA1

    1a34f0e4a0dfda9180a1e772f35c0832c7bc19a7

    SHA256

    d7fc9485697af3154ca4ff7e0459969f79c31a5ae4324abbde20525eba863f8e

    SHA512

    91587e347452a87f8b6a132d142e642d51b7f11b1d6ac991065483fe47935fc077e954af3d8d420bc54ea7bff0116ee71b6663114ba53bbc3d71b758036a9f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d32af38429b6d280c908bfb5e3260f

    SHA1

    b6b280cfb1e6a1a0d7d05e91161643794698ab58

    SHA256

    22cc44610a1551466b16c685e0a6747a53ab8cfe94b53304318457d0e60c4ae2

    SHA512

    3ed031a4ecd8a2287ec18a3fbfef6ee456b9c277fab4b35582917e8a6ad8ad6b0a87ab9c95bad0113c70aa442663ed7e50cf733bf04920aee6e30906ea288cad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a11d0386fb15aadbd4f0f6f3a04bae5e

    SHA1

    5dfeb5d0f1acb376cf2657eceb1ebe3677ff5e27

    SHA256

    61c4fc7685ae4f2ae3825471c1106bbaf26f7d7f804d5ecf4eed7297457c306f

    SHA512

    72157e3cb89fd2da7bb327e7a9e3f122f18196ef7df1db1982ea2b8b0616acc35753e03036384937315ec7d0380ad9036e77ecb30d90a006b84b2977a6a50005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    874146fdbd66a365ee0aeae638884a3e

    SHA1

    70f55a350b3053e306a5e15f26847e053e1befbf

    SHA256

    10a485c451d56ed983891d796634501258f91904d9b38538c3902f23a2c27e8b

    SHA512

    7d62139f0177ed58406fa33368d9ff86ed985b04393ecf7c3bcaabdb3cb654ace951da8c483bde05d6c2f745a89733608a6b6ea54035d9475fbb36e6bf2a8fe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a625e3ddaf15dd1ca899ab14d6efd6c

    SHA1

    b0bd3b4e293232e5c96d89c5d2bd69a193cd8474

    SHA256

    b2a04c9ed8f70c2561e4a65dfede1337039f3d4b193aad76527374599134cb2c

    SHA512

    cf3b62561f8e5ba25d2e94d1a4803a8e6c3e6112fb8aaacbe2092432e687ab99bd7a5e1bb2a97934d84364b94b39951ae520de3c69890e42b7ff62debcd03a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9da8c1018f6cdd2d8fff812eb59c2c8d

    SHA1

    7c088860742639faccefe52da764cfd981bf6a63

    SHA256

    05f67df53116d861f8a51481bbce0b937d6f895a2123351d11146fedc9df209b

    SHA512

    a098320598e2256a07978228922489879ea37343a1d493a08197cfed018c3fcb590bb1bfce6fc0ae89e7c535cad5f658af7ddb2e7bc8c389ce1ba067ab134d0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f2ca3e17b2a1ac06331c15b4b22bac5

    SHA1

    39cc546c490998d391712cc553f9a1cb798955b0

    SHA256

    b85d0b509ecf516e23dffe4784e828cf06806bf5f0245104389ea3201be1975c

    SHA512

    a104d797305de93a58705c086b006a67dcc2c52418428694c894c56b8f40302b845267ee56ae1578062ceea8db1d3ac77a7d7791d31079188afd382e2c05867f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6b6851f8957bfbd33cf52174525ceb5

    SHA1

    6a467d3fb7f0ae7b36f2ef1e376c42a833f4ddff

    SHA256

    47272602c3d81110ee5b92def6ba812cd68052753b902f9cdbac4ca415276aae

    SHA512

    18981dc9723012d32d76b88ba405db5b83bd302cb47d06d6486cce4997448966aa7d5c5a7cad286a4ce4bbba31e90ce97151e87116d060523a5fd5aa69589000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4b36e5da949a29b8d97406c7b8d46d09

    SHA1

    0b40aea516e23bd662fb29b4b9fb2bc66b7845ab

    SHA256

    f0868106e4090ffd660900a6302a7d0a1c2a6a21edcd2f3707e559d810e12a5f

    SHA512

    d3a4090c409c1c2bc8966d3898340e9f3b23d221eda06c1ced2a31007941b497207d2179ee15ca9d9689d527c6a836e564e4324b8ace554931233176e28f1b3a

  • C:\Users\Admin\AppData\Local\Temp\Cab956.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA14.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b