Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 19:01

General

  • Target

    bf37e0b846b30a20f475246c069dc68c_JaffaCakes118.html

  • Size

    4KB

  • MD5

    bf37e0b846b30a20f475246c069dc68c

  • SHA1

    a871c18ce0d8b24dcb05de775ac2e739e16444ee

  • SHA256

    95ed98949049c8df167a73888cf698975a3811d1afe44dd1e7bccc1d2c661c4e

  • SHA512

    f0496ffe3bd4cbf403104efea85a811029ee4c0c8aa5a1c4a77cfdc0d6c66bf786f91382df30a04016e9dcf808eef7a278cc9a0f22c1567e03846e59bdc8ffaa

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8olu4JWd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDF

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bf37e0b846b30a20f475246c069dc68c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a931a523908f35bdf93f1521b5e9d10

    SHA1

    0cd32e795d519ca4146cc8be66f3b10a27346f28

    SHA256

    3639455bff7fd3add8b0872ae8bd6c8dc428d76cb4673c35e249950e6b2f11c3

    SHA512

    2c97aa3f838732f178d7af01761955e319e486fc565a41eb64dd74d737b12fe0299e013349f13653f10a9a08c8d8a596d194c01a1bdae5d0e7072ca9678b8cb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12d4f965a669ca0e1bd54d797c39b708

    SHA1

    9920bb0d20064c768ed90892ea2d5de1ee406521

    SHA256

    bb2478aca412e5eb66ffd549169e91cfb7ad04e1c3bb7deda66d2765032a1c84

    SHA512

    0e95fdda99d4f290b9b2430b5601773947a2b572f264fed58523191810f61f737fa653061293563d977ab05849f3cb71713a6add6b38f51d9905e1e2c2e9a39b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4275a2bd42c5970935fa4239b4905da1

    SHA1

    e45e5cf3e1dbdc0fc10d3803f7fc511545a5ae72

    SHA256

    82164065297094da875ec7df53fca2808bde0e3d5ce2649595dbd29274f1165b

    SHA512

    a32bb3753d47523ae31547161f01160233bfca869ea629253b7a7127b472f4dcf1945f476f0890d3fb81d4012af1f87c01dd9e2c0c6d5b634ba6bb8ed5202c57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a19dbadebba8449ca9664d150077ff7b

    SHA1

    ad0f49f6873763d72e344fe78f062f13c1a8e8d2

    SHA256

    348c087c087d058cd59e44b6b71eebdf74c8204faed55d8564b4baf299544d15

    SHA512

    a3de183d54b3d6a539617b9941a0a763f00830b013264fd48679a7d280c21b605bb78613bae1bdf0f75793f99bb6d0d95a7dee82059254e5ae149abc0ff73395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa3401b7e248b7944acb2b3c85df0d1b

    SHA1

    861e057aa950cad60e390946f01e789605985a90

    SHA256

    9d92e40ba21f796540f4cbd67997a23b4a0af26bd423ae64291ad91f4be98f4b

    SHA512

    49352690c9d31e8a29c1fbf327c25a27f55887eb633fde9b1bc297265355a496f4509f42630914dc61971e960931d9f3256168caf2c8d0ff4a642e643f40a274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3883141de02067fecbc91685b9b892f6

    SHA1

    14cc2c0b5816d3f079ee10b1a9e5e3c27a5abee8

    SHA256

    18285b59a39309abdbcc8d5af139d964183c74befab00bf634503a03a1c70ce0

    SHA512

    5617277a5f4136ee48c8b89eb6b40091d3a6e8b86bf4d8d30a5c8dcc40585baa71eaa16e208d3208e59a84a14adc5f420694e525bc6c33c43cd453cc204a4ac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d1dc2c3efc909c3164d0af919190191

    SHA1

    5ac498183f6255764dce96704cca36ba84adcca7

    SHA256

    4ab841254254f85c857201b05a6506111e7a2874be0c550cd42ceb79cff9510f

    SHA512

    c07caa56712379ae4dd42b360fd65bb77929cdbfe34bdecfbc5d16efc09e710ce2af67572e57a1fdad4d86fcdc3556c4413e9ff76a0726b12b31ea3ca468cd26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20f03d4ea62b54d4c558935cd56ed94a

    SHA1

    79576d440cf7bf141f3718abe9cad35d4890250b

    SHA256

    bc53368728c375690443aef6cfe8144d76815af473eae64bf920133244055d04

    SHA512

    245e2a662f5d1bc8bf5c5f5d10984e314c1d44c2c19e904e35427e511dba026eb82570643c9355ed1c35ca18a93e9dc86f5b64f3321527b6f9e6f997ecadd458

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90785d90c44ab17f4c1ef8e5e644f0e6

    SHA1

    df67f7f62d4c8f40028f4df74c547fe84bfde5a4

    SHA256

    dbd3bc6e5f5d6662b4e09663250faa01b201a48bac5f67a3ae7eb874e338bce1

    SHA512

    9dc4f44d3c688c395df21d2ed37378c353748cd9b38f49b166f61c5861ee9d13f2eba98a0dec743944b76ce05dc634367a59b4038dd4ab1d0083aa1ac1445936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbd2ec864b44543e3be5a003ed67cc5a

    SHA1

    da9d4139a523d0f0846f28515902dfdfe7cf373b

    SHA256

    b024cc1d37fb4badf852ff5f3ad3004e117e2919118fee01b2c27d605d5e870e

    SHA512

    253817860f4aa3761a7517a9f9f0707796fab94385ae9113538ae82f7bc96d3b152f4ba5cdd797b0a3c91071522675dd16824bcb36fc0c6a8f9e089940532f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99777b7f461e84f92561ce6d4e5e61fe

    SHA1

    d541cbf8f8702911c334e12c01801b94dec5a00a

    SHA256

    4064ec630422909fedff231df4a5d152b4c76d7660f114932a170f713a761a6a

    SHA512

    87eabe00ff06bf0607eb13753ebabd9fd5f732b5f6ff23c4822c6d315bd941df608893472604c8e711524444a766d10f933090829eef47ed3e9b3bc32ba16347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98013c3b7d44279e94978541f25beb77

    SHA1

    213e3784f09b94b22d7c0aac4e6c061c4971f51c

    SHA256

    804af255776fd006bf9b6f592fecc880f024d3bed0c274b92045c0faaaf2cf58

    SHA512

    5297edae64356beca7e6e13ece9b6d6bf7761ea89aaa6bb4db16b3f7501490c848991106b05b87a7090d4d88f0e6d3c17ef04ec950f7fc88434de7e3cd123572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42b72c0bbbf8de47c340766ee26ff9aa

    SHA1

    cef18f34be06980c8a8e8364dc72f9e1ae8612c3

    SHA256

    d8fb3b1e4aaa259bd40384c756cde8ee4e94744a16a35357bd77f0797325dfa4

    SHA512

    c6712a48e7986a94299d167e1ca48dbe931456eefcdc3d511f17db44c4edf6d73ba65ff1502335c115451c911c5edba8ad3eb053480bccedd25035b331f26ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3956d9fa4fdf6e72161275b68b569b4f

    SHA1

    ef568e25209592be6cc3094267f5c83f0b0d895a

    SHA256

    112b8bd9edd4e48681ab77bc2e920d6ecdbc404eb2c56a9e3a4a5d7a66118896

    SHA512

    ed3dc1203b7cefdf1f82e7af9a42c9be99ee3ca4ae915195fa883d0bd3a11f3af5ccaad99321a06b7718238905f2c138d1a902964a588aff06f5fb4c5460cacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35e70f0beaddd642022d315d6242866d

    SHA1

    9a6ce4ee864273b5d8894a8bccc19eb6e9f0bac3

    SHA256

    f34cbd6ea9c22422d33a8a820307312acae3fbb05b0bcbbfdb4e2481d9d0e374

    SHA512

    582d1ec2011d96523a4571971ae412ddd93278a7272ee5a4113d3df2ae82f5fbf53b406960f113a8263fbdaf9eb6034c50c3a841dede495fe535ef17e7515f66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138567e3cab653418f7ede8c30da6be1

    SHA1

    3d2052517e632401bc7314c535f6481d9be97f1b

    SHA256

    806f1b757c7eebe05a4ca22470d806ebfbe17b4050517abc3da1dcc0403c12a1

    SHA512

    8caeb05515362f7f55a2424ea448c4c8b9821fd9423dd1970cd55acacccb272a96fb404142d7c5b2fa298b3a94d6da6480b24cc1c3364ef5d5942b1a17ba13e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7cdd132abb2a0e9f3a266a2e2d8d6bfe

    SHA1

    4378544122f1f38a84f704117b4db05d058757b5

    SHA256

    06349d32f2c87ecc414ec928d20bc6a9eec5c5c5b6c0282f701b4758950b0c49

    SHA512

    6e7bbcd11ac8c1aa0cc0fc390679b7b02651d7e037787d418c3769fd4debac9c746fd4107ff1d1b74e02a95b580d918fc9d71e46ae50f7c4e464dc3af2bd4657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02c14e209fdd3cd19a5014c1aed6ae9a

    SHA1

    e25deba243598c6e8ea4f9992906981faee7dc5d

    SHA256

    36649bd2a87325009ed34ea7f50bb8de7853669d26539cc0450847cf11fe1ebe

    SHA512

    1f245b05319186865ea0b985d1af702ec24f0772d66a3607311936a112a22ea0516b98ce6fca4f271bc9b3f122b3b89c4c7a0b429321ab2596905c2b8f000c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72d97e4b21c4f6e78e8b09c78a263878

    SHA1

    129640d2843da469d83ef248c77f6d39269c84a6

    SHA256

    377c67494d2b4e457dda28c463e31dcc14ff4ba0c4c125c1e9bc4ebc96e1e854

    SHA512

    439080a42714b4ca1308286f03b0010d2e26f96c744487442e6aa98a47876a71aecb011949355630f72abba15de253517e5bb37aea0ae6ef671c4f1cf065a0d8

  • C:\Users\Admin\AppData\Local\Temp\CabB158.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB216.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b