Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    70s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 21:54

General

  • Target

    b0fba247b95cca2a61439580f4a3b631_JaffaCakes118.html

  • Size

    2.7MB

  • MD5

    b0fba247b95cca2a61439580f4a3b631

  • SHA1

    872a31c460bd74a64ae1971f85ada26d458513be

  • SHA256

    51907e48f8cbfc06d49c4dccc9612d36d3b73e99977c0fc414b18cf201fa3896

  • SHA512

    deeb70aa657387fd7cadbe6302a505e703bc662da4462c7d4ddfafdfab1b70c4f13c639e05cd1475b843446e961545081c340d92f1da2d94491b0402cab5b20a

  • SSDEEP

    24576:n+8+Lc+Q+4+0+a+A+y+V+x+t+s+T+5+U+i+L+5+x+Q+1+b+V+N+Z:w

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b0fba247b95cca2a61439580f4a3b631_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1696 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3a084ea2a0b856f6be1d2cefc483baee

    SHA1

    e443bda00c9d1687b0f360589b388eba42596b4e

    SHA256

    ab09f931c79d2a02f3cbbb248d49822c820bb64a65ab5ab7ff947bdcd6e70e26

    SHA512

    c1cf1ec3f4068284a0644a6dd229b5bf16b4079e2fbd8bfe3dc8f078bb5e33bab021e8cd59e0112fad17307f1afc8a93cfa827a6f16590aeb9d6f47f9cbec709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d348569b5491583613ab21ba6f14f1e2

    SHA1

    1937ea113163f9eea9875a32ca9cab92a933c067

    SHA256

    e68d59ec0dc10297c540b75e0bf29693ae6d284ec22b46512cb202f20f9a4a65

    SHA512

    46fbef64b4f629cfdb722ffa9457d8a5bfea8192bb324fec64b2055d2cb881d137f4165634623b8c56bb981a5c73fcdd594a893100fa89958b41397ecfd53b98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ca5f97811de0aead8f4f7536b585fe9

    SHA1

    e818f358c2ede9790349671325dc0c00b057ebb3

    SHA256

    8be25a66fa9d4b317b124a09fbc6422190fcd8c7d9be5f9b88aca6ecc727abca

    SHA512

    76d131d323bf05908c6334aa80f48aceb25d2fa7f81fedd385eab32b313f773df50cbcd0695b52cd507a7bc3ed5ea2e2e98a2ef9ce3ef893fb30b98b405be641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0497785ca29bc8c08fce8134a00ad3bc

    SHA1

    2c12e1598d6d211d3017fe26b255849cb9fa8333

    SHA256

    48d5bd758772b6ca38d81fb893a8f57638904833d86106521f8778c5b5487642

    SHA512

    1e7d7b4404f03d694240f2a1d9f5507ac659ed394a1894dd3cb2c9787889b87dddf1339316c6e5572a52cc44c08a32e67d3e3877593790c70ddef6aa63bf30af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2158ac8a3fa53b3f461bf53fd84c9e79

    SHA1

    58ce62c1c9b90cee3cfb59e14f343f2c28571013

    SHA256

    7b98968add4014e82d1537540762e03d855812a4532b0fa77016fbdfb7bcc99d

    SHA512

    81be5e3ef93ec8da9ba2527b9543e8f94f95181876f77db86d101c48a52399845c2542a21fc87b243b5cd0cc34b1a633831dbb527a514924f379d611593f76bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e63941291fd2909dfa724e26db483773

    SHA1

    42409d9abdad582007874a6d7cdd8271f6221c1a

    SHA256

    c8f649cb8b8b4f218af8c41c4c5d261b164c3a785f98e44ff9b2a3cc097c0a2b

    SHA512

    79edb9edfa9fa6f4050eaab2dfd66142effe4b4fc39dbc27bea0c46d10526cfb9b479029a0d4c5a52438cc10be2ac1fe264fccf089ef062bcbc249418b0b2217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00d1b62c28ed9bbaa5600ff8e757d239

    SHA1

    6349090f50a9992a19ac08bf38e24e4fb2a5c52d

    SHA256

    188a3dba84d3cb314f00ad9f0e7bc9836895aade54f72f5c946ad1c9511a7a73

    SHA512

    19e776a6e5e73693cff098b359940e355264827179fda1379bb03710251fa2f29bb79bd492df09103d23ed74cba2a7352bcd8a1cb7840fd3a2859b688525d114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41d3554b4f342357356fafbb31b2f326

    SHA1

    24d72c7f764076b4728679c350e44ccb5a851452

    SHA256

    ff22a5b23cfd0f09f7ef0a9160d8d5788de721bf218a40ef686d97bcdf5334d2

    SHA512

    8757492a8d6599590785937b1b00aa7c32fba4e08f360efb45ecb6ad46ee62c216bcf743706d11e5a639b3092eadb1e7b0cb809e5ceeb99c8d3768df8a05ea5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb0e44575bccd62d4348c9a48f918772

    SHA1

    c7fa94b9f1ebc5f63f79ebd1e50cd56635232fa3

    SHA256

    e7a9906f180189c2fb27855328a030cfda1622f69ae0fba6fc93e3bdfc4793a1

    SHA512

    9ae54a423f9689ad600652388a25ffdd75d9340e525d6edc984c34e79d02b80a1d3745281afefe366e7db858dd527a2c3c43483c7dc837e769b254ace76c0e42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1b994b590e1bf8b47357f9330c0369f

    SHA1

    0589bee93f956c0b9183cb07dfbec0745724ebe7

    SHA256

    7ff56e12cfbf1fcdc81001d14d61ca23954dac1d34cc4d583ef1b7a92ce94294

    SHA512

    e1aaeff81c503ef828529874ec62b46cda8fffa276ea8a1a209f108fcc9cdeb6d06a0c53b63fab0baa9886fa1025e058d59e2b40502efd7de425f12aaf5e0409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1761bfd35a180bcf61f1694670ebd027

    SHA1

    b9954e590cafac447d2fbc5540eb3b7189352ad8

    SHA256

    aad54bd81d2a6103e02a72507c40abe66b8f591858d831c31935c8490d4853f4

    SHA512

    ffc38ce68c10f25896d8f1d6feb2e35f934913d0ea68f2334c6c1dccc8affb1ec9b315067dbe50c38827fd8e768a06c9a6d3038a2dd2702e9bdc023918e4a947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7cb5c234a8441e15bb4154a7c715e9e

    SHA1

    327e42434866688719d19c430a78159e232c8731

    SHA256

    8a723d90fe0ece1eb3492264188aaa7c7284f3de158485cac57f9819b9471a59

    SHA512

    c0d36ee2041d67c6115759b4632cfc45819d8bbc26ee7f31e93b129156edea0fe01e703901a375ac6367611bb70f7542ee5c4279fd75830428c3106710069325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bb5250932de8823bdf588aed7cc62a5

    SHA1

    37ade34e5ea7a226580e96a8ee739604e9fddba8

    SHA256

    52e1ab4af340570a379dfd5529ed8c71624da8c15934995c17b03314a4fbce30

    SHA512

    e5c90ebd92fc63889263b6d11695fae89a6c15a208cdc31314951c2f2a08b925866fe506e67a166c85c57619252a88bf5916b20d1f6fb1ba396f42ac0d24dd5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f6e14bca6f460be2bd44344dc403781

    SHA1

    ea31b73f72c4d8c5ac87c7f025cb8ba67a1bdbb2

    SHA256

    3ef803d8ca406dfc418bb5fe8ca19b42679fa58d82c97c8b8649ee26d941aa1d

    SHA512

    d2a6283ebd848ffa16c34282be7fcfe125172cd5fdbfaa77605e769f7d6417e07ac89a27e51938f1278efabc733a84e76ea26cf63e1602c6ab2761d1a142c6d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    274863d6caa1a64d8a1ce3478719e80f

    SHA1

    871352814a0de6904e7bd97632e952f20cd74a8e

    SHA256

    ba8d41da7a4cd40f6277b6df3b3deda28b7345266a8d83b866ac0647eea6676e

    SHA512

    e28b49ac17c2a15e07b8eb7cb7ea207a06a7cbbe5c2b693139dbbcfd291eab40225993b9da5b48cae3002fef12164226319e0afb1ccc9fae2e62a703c6d51069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5c06c6ab1b292d3c8fe9c03e2f6c1f6

    SHA1

    5343080cded985cebf889722e7100c0baba51d62

    SHA256

    9a98567885632d67060591e959a4a4dcc8ad57865d93a7649b5b1523efa644f0

    SHA512

    1df1e4159a20bcfcc42d2908c0ec00213216ff27acee33110cf0066955bd81b7e42d92630b21493dff3f23584bbf7a2eda8b438964413043cc84f9d6ad1c691a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9c8a4ae49ea7136e65edf1fdde41c68

    SHA1

    9624fcf8ccf0d73f744500850202a1272e33c89e

    SHA256

    165e7feef7a202b5192458987b65e72573312f6758627aed6849c397b022192d

    SHA512

    af296b15ffd40de42513d0abad9c9cf864e033f4a8f4263841931a95530b76520ab082c9985c852be7bf74348f5ad99e1b9f7381ca6ba4c786f5fa04012f49a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66e4a7cb28040a2268fc4e67ae2038d9

    SHA1

    a4116b9d38ee692b9dd2e56ca9631d58a694f518

    SHA256

    0e8154e41c5d4ac4e3d2a295f3a40ef9346ed538b0aaac632f4146f731039f57

    SHA512

    71bd7bee394c66723a375bbd25d362502e89199359beac6b5e707db46039130cd977c2feabcaf6d81616a135c0eaeb4dd3233da65b840ec4d96488a808ae93ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11123b8a5071d4bd7883571def5ad00b

    SHA1

    81e1aa823bf15a96d5b8f2949312c5ae5b14d04c

    SHA256

    52ec5a6886cbb425e6f2e332ddebf9a7ffa76295b0ab323645720c73463c2fca

    SHA512

    a5cfd54093ec0b93bc2108f33626171df27de90529251df9353372f91f5f8688016a46fdd797abc2b208f7909d393189eeaa711e2aadc790ce6776fac67b48cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c294735f18c1b26a5d88c274860e400b

    SHA1

    f012de5733fd51a441687aecb927e39eb5295f52

    SHA256

    375b0f1e7dab59d8ce95e02abbb9e9282ce8b7305338a34fda3ae1c1c6218863

    SHA512

    4fdcb7a9212e1361422c179e79af06066913ebe381e25d63be93dc2be7eec6496fc5baecb8ec0f86a98d575f65d9dcc782a4cd2791e174a59cafed03ae2f3bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    bb5e28b1d6225a5f8293c934842b2e21

    SHA1

    7a30df04970f3c4115aab16624be0b8cc00dd806

    SHA256

    fe458c365849a4d89418b4b706e811713afbe3f3a64625fca48a5799b819eae1

    SHA512

    017e860e40dc7f0c5e28a806615432f91b4082020accf2ef864f931d23c4dcdb9485f396aca9bd8eca5d60e9a074c00d6c3c02772cc623ad7128a43fa1b38278

  • C:\Users\Admin\AppData\Local\Temp\Cab4368.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar436A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b