Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 09:08

General

  • Target

    b713c88a669f608f2a4e0c82bb6f757b_JaffaCakes118.html

  • Size

    18KB

  • MD5

    b713c88a669f608f2a4e0c82bb6f757b

  • SHA1

    53444905043e6a9d006d6db4d5981c4113ff3b47

  • SHA256

    c95e7ff76934e0a28f51e5e179e1e2bba91df9d1391d8e25e184d5832ad5f512

  • SHA512

    3255f5094ccdd084bc823750c469eb696f73c540370554ddf2fdeebc4770fc382526fc9b08c0aabf6c30b9fe4a36275c15642b63a140abb14c589984e47da8e7

  • SSDEEP

    192:m2yuuUvpiNnR4qLKyBFFg5KjdeYHM5Ic+BwCndjPZjdjEzcTpukoSO:mj+qLKyBFFg5KjdZHM5l+Bw8djLjEzR

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b713c88a669f608f2a4e0c82bb6f757b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2500
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2500 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bbf1064b183a4284705a5c1703d2d86e

    SHA1

    b3ca9b355ebddf5b77af507f07db46fac3fbf61b

    SHA256

    a34c4b02f9a3651e3e23068111a84151914fb6ca3c6895f7703622e5999cdaa5

    SHA512

    1b987a161c034051c5d6ee8c943350288c85d87bf466a467f3c5000c84da5848080cb3fcbedbf72bcc60dd4183fc3a8051889d0538f484bf7fd65424e0b489ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f040d1fa725da2d5f5e2b4454002dd0

    SHA1

    035dc06fce76c5236990e6101f5d045a51166169

    SHA256

    a846fb553f9c18371c6e8fd5f45c14b7095f18686b53f964345e6ab5094f54b5

    SHA512

    bfccd477c3e64a0ff9f311c025085e3a0efbf3424d46448980e5eade05a50f752be7727a8e64e9434f791c09a3e136753b2a85ba7cb35c4027e2299463014acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa1ca6f2a0c5d9850659f66400d2a519

    SHA1

    16f0b63db11e203f2b18b36c331f98e8642063c3

    SHA256

    3bb84fa85a2a4a2fd8992287ed84fa185f92d2a7c07fb956e7e9492d13efb0fb

    SHA512

    12b00ddae2f3060d88f92d384de7ad7e548518cf79e709b2b52a6cb3fffbf66eb3e39ee476af803059a5f20a9e88e5d7874b1189a17b2b7508f141eb27401182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    007c92f867aa4a29f5590ce8c17ad15f

    SHA1

    821b816a6919c6883fe7da79718725e4fb8f5b73

    SHA256

    dc5ba9a8637ec71bdb74bd4acf473ca27ec3b89760c047a52a9d7b9b28f638e3

    SHA512

    aeef8839e5af4a8e66f23ab583c488c0ddb3f7381f49372517707291b5374053d563f530b7f808c4053f6304d5854fb2f34dcefc5412642b3eeb9c1b81265dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64e4937d1e22de00497f1f955c55f37d

    SHA1

    22b01c79af9a162499cbcfaccc8f034b03b7ecdc

    SHA256

    b458aa57ca5abb429bccfb98dda3370e395d17acb400238f1ce95a0f7cd8ab8c

    SHA512

    1d75dfec1746d9c459da6e3b45ce104343b479b1b2c1fbe05d1f561648b84df092ff4f300dc8cf597763003424a0a38f9f8c8683312b2e61aca42e8858bb6c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    035bfefcc674046947ba4e2622c7f0fb

    SHA1

    1a152a013d00ba81438b90f772439700ca80cd9d

    SHA256

    d5a8074566e9df42ae7bc1108341045e62dde4c1f004c01b585f3f26606cd680

    SHA512

    5d8483a4a5d3bd9a17abb04c7c3c75df99e4a593a13a3881ef1a37638983fc506649946d1bbaeea6e597d3a47ca349786319cc9417f10b90f78c945186253a4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    831166a2c4fd6dbfa906b53373e228c1

    SHA1

    04f9cbb064ca914b619be6525a985549f3f96f3e

    SHA256

    ff43fb9e8d2114d04d51adaa69890e5f24535297b7263c9d266adf5adae81b68

    SHA512

    4625453ab6fdb14f1a27aa20181288e80c9c8fc64015763eb7bb2aec11e41e7563c6c0578fda4221d3d393540f1845296716fe932419173a083f13aeb34734eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a91826f0da58d2f6edce87be3eee49c

    SHA1

    a105b55a340a82dbcff3d2841c4976356ce6de13

    SHA256

    811fbb4234b7be7e8b8cc921be7f62eecf169989c82c39910940ab02ed1b64b7

    SHA512

    7743c50013b925341407682a3fc6bfb35eca505d33d860106e28eedf5096f05499d626d115a5557557013d508236bac51f2dee047f322f4a6760d25abdf4e0d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a071237cceb84daa86acd07a1955c2b3

    SHA1

    420ee689a0f469206e0057c41f237b92e306c480

    SHA256

    da9254736efcab0d73124513bd34d2915ecd8d22c5154ec6fa11bfecb4ea9f8e

    SHA512

    a42ab52283d428be11b30d4123cc7e959ed29e86aaf7c7a837e87ebb17f4e3e2cd195c63f12161b144ec3fa346962062dde20c854e75644302c807fd7c42c321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca77fafd5a4e933299d89a60c05cb258

    SHA1

    82bfc1131ba8a4e480858e680709b2dd5de1bd74

    SHA256

    1ff2aa1c4036f393cdd0dd4c0f4500be229dd23c884a3aa13bc43ff9d3484dd7

    SHA512

    ab451dbfcd6855a4cdcc5cb93d1082d5fac8dcdf40774986d354917cf47c2664731480f2ef6e70c475081c56699f26ff6c2208e097a67e7193e2e55db077471c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d1a222a97bed4aaec3132b99e54f97a

    SHA1

    78412ed9cad10b9badd5b73a678b25e0cd9dbb7e

    SHA256

    cd425f786d5535fdc9c44b220e651220a356bb10d75404a41078d0284884ac3c

    SHA512

    6e49f95b5139c3e6d7acd34e5d1f37666c40211ca779fe081319263646b947257693a72a794c12b4d4e9597c55e4d0d17c8b0a9310790fc1eaee084285c6829a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b21b89cb9e92c7afc299a877110d5f3

    SHA1

    dc06aeac16d8e6d3a75e33dd5d7f0d5e645f598e

    SHA256

    f0aac627dffbeb6b68a23a6110a43df7041dbc35931f9d5b5f951a5f7b0c8d31

    SHA512

    98a326df356a7e56005fe8d9a4f5715e4f584abad3b29b2695433126a399314b6e963c690a8486aaf3a95f9bd9de37e8c37b386d97963ef123a1a0a65c979e10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    399e3bc6dea213104038d2f30b7dadf7

    SHA1

    a01139291a52377dc2b38467866c4770bf6631ee

    SHA256

    9437a9c5c45ddd35667be05d49ad70012ba68652bae4005e8353a5eada77b083

    SHA512

    b2623bd86e670ebc24f9fda6e2e9c62a3969e9ebe4d6a7bef430a20b06c3225e5dde2740e69e4dfdeb9bd37c3c511e1c77ef9c1eef24baba41ea6838f6819c0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ca8a25091db04e202d11f6022ab3a4b

    SHA1

    0e106a8f3ae517de88504a5f6e75667878bd8df5

    SHA256

    6c24189dc31dd1a7b5fa21ce9bd614491df932390ca91a75ddc4df91f32260c5

    SHA512

    c8c478b803c59c303df04705dedaca02accf51124facddf29c32cb23d661c641b956664bded521f90da9bd78af61ed455d23af674aa8ce3971cfc0d0f2e2bdb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92d1e35aa78f2d4127dd534c88c3f906

    SHA1

    655d69db7742b975d091b2be70734facbcd03fe7

    SHA256

    1185c5ea5ef6af1f122a170140ce17702ccca3ddb0cd619b9be7d7ec57bb168f

    SHA512

    f0dc0c32286fbff1c0779d7bb827cdfee9cf22ea9b15ed02820d01d30bda394688bf4ca0c3cd38601d057a8719bc1fe6efc8ddc455b7bfc677ee237dea54a3cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a747ed0066528cbba17f25e66669923

    SHA1

    995a22e6b63234c02aa9c53c928cb861faab1483

    SHA256

    a92984374d1e9cbc1637009e781659fa14d1ee4abe3b73c2e01d287671c97fe6

    SHA512

    13c972d8ee79d069013251c96a721096bc6e078b8df0c305f1b27133b3cdc4e0c72f149ec48d6fbe19b7b0785b0031320a6d30708fa88ee7b4e3affc7e5d3872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd556d52f0ccb047664c703e645ffe81

    SHA1

    175c534da8014f2dcba61bc1a2f05457a58d059d

    SHA256

    6b32c841869cf319e43bf98bb1cc73e01c9217b80680370b2e88c12ba946de84

    SHA512

    cdc40e81cb434b3bf2fab3aaa57cb425ede0f0a6896ab2848aa6f7904e1685f21042e40bfd1c70b1eacbf75694345de58611a358809c78f22f1b5bde81fb05a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f1829bd8468369980045fa2187ac0d7

    SHA1

    2235b6ac46c66bbf321e0fa621271d70c9bd9f76

    SHA256

    e28635a76715f590a1d54fff2c2561895fa1ea5b305bec180f315839541e1b56

    SHA512

    193d56f02259eb87dc97e9ef1c41fcd6759edb66bd0cfbca054aa7d3a446f6f028a8a0b72a9a3d0ea7200de550ce0a54597f7b9b7672298e6def181e288ea0f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    28b02057665e1825faf81e38345921e2

    SHA1

    8e99075029338bc281016d3ebbf2fb7ec7294455

    SHA256

    0d5d25b8ea43ab2842039cedd5dd0f577b75868dadfede3adb7f9c801fe23d2f

    SHA512

    5b15125dc72e365f2a4e4f3955b6b58089d4b7fea20bc5d26662ab7c1798bf34450a5d154199e40b0bf6ef2e54c5eefafce578df5d0981865d1114c61beaa6a4

  • C:\Users\Admin\AppData\Local\Temp\CabFEBC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFEBB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b