Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 00:28

General

  • Target

    bfc0fe836c915404710ea091f33245b5_JaffaCakes118.html

  • Size

    61KB

  • MD5

    bfc0fe836c915404710ea091f33245b5

  • SHA1

    c5a90959e517c1468642eaa232dda4c6ec5cb6f0

  • SHA256

    c705cb15469b222d74cb1c01e5eade4237615d8ad3760b7a54c5ed772a7c3fc8

  • SHA512

    3b1871e2a72b9cc2bdb7d71644dea312384a8b2198222ff3cff2bd441c4799b54b06b1072206bf0fe80389765a737ebb0a5dec2a1d16a862d694e7121d97a558

  • SSDEEP

    1536:X9BPNqoqMiB8z3Tf+Zv46CdOwdMDvXAZM:XPFNqMyiD6CdOwdMDvXAZM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bfc0fe836c915404710ea091f33245b5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3bc88c026c3c5a91891085c5e3fa638

    SHA1

    eb9d0df29a24ad23b832f6b5408e8c19848f3216

    SHA256

    8ecfd0ecbb99d593b5ab502de9e92953b5a1f10d417567ee9fbfb4912c1cd60f

    SHA512

    7c790df064ab79890e496fbbcab301b163909b09e1b219d98993932fde0b8015a03d036b2ab21e95d0ed187a7d8771b3c52c916042b32c1f08abe25a7267cd40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c820b142cb1351b7c4b483eabb421f0

    SHA1

    0e86c9e720a2fb4ed2f4ceaaa44bde52fee9e8b1

    SHA256

    d62ea123a7ee109c9217fa936b2993286a624f209edbdd958889f3e2270df380

    SHA512

    fadc94791481d13a34a75453236fe08c744b93db538f74eb43ecc74e46fc6a8742c06f0495759e9385f19fd5b4a6349dff876baf79738e3d5898184e1a91108a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e39e395f42a0a4030df4b3db29045b1d

    SHA1

    966ff05e628ccf2f65b39a3d063793b47c5431e8

    SHA256

    f53dfed974ff244b1fb5e31e8b7eba977bee5c67dc7696bd96767070a43542f2

    SHA512

    1d46abfdf3ff0804a6994449b2fb35c319888256cc645e2a04d91e6a142b662239112cd4ce0c223e4d9e2f8ca2e67e6744fbae23d81fdc5ba120efd32a81f65c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed1368425690db24e91ed7da895cc1d8

    SHA1

    8fa9fe478440b4b2bb7632e60a61311871c7a38c

    SHA256

    35bba72e3cbbd422449caa065c250da3b023369c3b0c2b188b5fe51ae85acc4e

    SHA512

    cb81a9fb0130a80eb6d917bb603a0a744166a677b12fdabfa0b3a124a74c42997aed3e3c882135ddce2e92336a373a7c206736aaa1c84f501a03232427c26a6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7db28eb99ff4d9c168f812a32cd5fa6

    SHA1

    b0d502c8a0ce201f77bbaad4247e6c64bc7af0f2

    SHA256

    ba2ba23a216b17a59186c3816f7f694278d584a05be796dcd001b0e8de027a39

    SHA512

    dd9235c0ebb9de07f1f8ac267ac5c0487414e471e43902d9e4a60c348dc3b5c2f0931a77095735dbc988aa0f4a561ac446b5b4d83cd49b54d596d5b62a19b69b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a40472563ae573b9a1ee4d575fd32fc

    SHA1

    b027e5bcc29311c282f38497420a465c262aa200

    SHA256

    a6cc3963d30d2e99a40088364ddd95987200ea514502908ded2e3789d62ec82b

    SHA512

    d12de8718b9386984392280a83f066f1655c1849d074ad6af693d95f953f27f602f58f9176efc85d7036a10e56efe48199b5aa738eb2c87b8c9c0ff5191b8071

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d83d04ce2b458d8819280886a8213e4f

    SHA1

    0765f7422544023e1f13a9a521041db6c4fe9874

    SHA256

    ee3cbd4e71a2dcc26186f8fae25e30959c1cbac61f9d9bfff80006f1e276df2a

    SHA512

    86a93dab824299f8e8681a0bd64734d6b4f7fd36293f10084a1f5a8770e1aba344d23fd72f560735ccc3f59ecd5a52d6cacd844f1225022f34d150f616d9a80b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    297217475f46af199c496db27f6732e8

    SHA1

    e5560fa3b5224f2eec6ec2e837a1627a2d8717ca

    SHA256

    57b710f2927c062614591ae2a56651b952335980ecd45b2e1f55dcce29122dc4

    SHA512

    c46518c9ba452f550d377c870a006e32cf1a42921f5fbeae200c1719493ae5399ca03bfa65e2350b4fa193a29dcebc6d9528e82f9e9cd2aaa0159a0807dd102c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f78b789d16f1b3a50e6ff76f368dde2e

    SHA1

    e83da0c8858115583793372f3b5a137d286d350e

    SHA256

    ff8e1a935fa59dc900edf06ee3bf8825308774440a375dce69891fb61883457c

    SHA512

    4c512d36b819a83f12749987554910a6f42371713b71fa5d8c6449a6659a15c1208908496269cc53bfdbd3c679483678cefc098d1af68a96d83b42b81e60b9c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ed50ee15c2ecfd849b3b0d2a8b12346

    SHA1

    529959b613b5f27c89eabdd92d0ffcacd7d3f76d

    SHA256

    d0899d45dcd3377726b7d5abbfed4141e1765d1d7aee5fb927723952961c626f

    SHA512

    c68c5ff14ed6aa58bc2867033e4b7b5a0125c73e26fe44826b88d35030ca1f472cb3d898b155cdac715538c9eda67b2be84edfdd46b5cf313df0c0855ebfca0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9e13f0a53b5f49d88b1f3e360019ea9

    SHA1

    067705267fcdbf43eef28a819f9f706a608143cf

    SHA256

    f1f229cf633cfba3b300220fb29fac3669a9e3eb6a44ca3cabbff7eca10d250f

    SHA512

    41c67d548ff76e5f175f1d2ebadaf5da6414c8d14cb39cd03b608d4be9580eac2370261aa9b7505d8c26c25b7130f7241ac9c68fc96074e5c76ac352878ccc53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d100dc65d13e2d1fa999027f083bc7a

    SHA1

    a9c8130b4a2875e57799f3c0e8c0b535b41e1f47

    SHA256

    52402a928de2781eaf6e3d9a7349fd7a6e29a0345045c7579344fc90a940302b

    SHA512

    d7f3cdbdcea36399f3ae597a3b1b3270d044c9247c253c6fafee3e8d99aeab7f8f18c48aae71f3fba2c11c76c7d00c21654b5fc0cde16d26f5adb702694a041e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ade5cf0a0f1c34c02393835626a5077f

    SHA1

    db67737f666a3d2bf2e43c4f5d70bf1fb960a32d

    SHA256

    5be43ab2b3764e6c9a885d79b5a301061163ec03b758ffb2a925e95e3ad9c9a5

    SHA512

    e120f5787f7dafcc7793b8d24208d8bb11451a53cd43b6f5af32883e1f33c56210c04a18bdf98b30ac3b8169bfb505bf0b32c8c390d7fc7c3a613bb6f7f6fe7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efce13537f4b431d12d619fa9c19e4f3

    SHA1

    0db28330c9ec40165f27963f9be6cb6142bde7cd

    SHA256

    9ee3ed14971b9e7a2a74fbcf3d48253174ba19db4cf2b30a06c77db17944c7ec

    SHA512

    6b105c15d059b738f4a176adf3e8c1bca5d61499d8f1b4670fc3ce92d7c3c70db170bc57894faedb865c461bac48239b039351bba312446daeaa59349deb4ba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2b2b6123201f35e069df20a59a4776a

    SHA1

    61e7c8bb9d8a0e184c47579d467f9059510c5d37

    SHA256

    3e6158d75cad766940328224f1ca3612f858b62d47aabecce998a4ae50b82f75

    SHA512

    c8d45b27e9d792073b8aba8aa6ea10fd7f3b0286fe04ba881e1b4b1354ea391a7c2c64691c1764ca89bf0be41f94129272934463c2b799b13534a63805cd77ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a21c01ff00090273aac6bf97ed5350b5

    SHA1

    04ab387f492fd74fea6ca4dad1e28b6aef46236c

    SHA256

    324a5fa88e5a53b43316e2a198d59a67b1fad4b39c080a0ee58b173ea1e8965a

    SHA512

    12e607cc95bf6caffa1629cae7224fd242e4a12e7178b1d6f0e50ae3acba1e6debe58495773c5a6d5faf9b9f4fc9378478cf5945baa1ad9568433e7ea61bb8fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e9514a007c878d7fd113c7eec734657

    SHA1

    f3c661a1856486df577d4b78704ef1a2d9d3655c

    SHA256

    ef73ebd95413cd35c59c9056685667a59ef674253b340eb1039bf805f440d5ae

    SHA512

    1f13f30d43d9615f5f853e2e5610ba52bc5eeeb041231a21a3f41553ed85b87d5f08554b6633962c4a3b4a4c76504b520fcef8b14c802c166b23bd0c1e410492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    491656690430497307c0c7af5c387ec2

    SHA1

    481e1ea3bbb5c436f38ca1237a94b9ac77255836

    SHA256

    f32a383c1fc3dc0a83841333d25dfee0ac1e7e57c896ae973e1b7d487a356d75

    SHA512

    dbf654379c928d2afb4fcc4000e86c8adea53f99c534dd0d20d0c29403541c5f8fc058e3e9bdc9b3359afc8b46f122c5652861328a8e4b1d0478fd0f8662dac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eda84abeffb497edaab85d551529533

    SHA1

    5621d8fb29dde9b2b7246687ea40de2ed8300dc2

    SHA256

    62636e749b0a719c682d66f695e3f601b700be0144abb4d2dc51e952aefa2141

    SHA512

    ce6801b92b8b7a0b182400df7dd92f4991a96e24ea494fe55f74330127ccfaf2103dffb6d853ce88aa0b3fdf714ee0e6fd70ac4f4f741f5bc1c1af031944abfd

  • C:\Users\Admin\AppData\Local\Temp\Cab94C2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9986.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b