Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 04:48

General

  • Target

    c83e8e2a7238fb1e12337b8e26f18fb4_JaffaCakes118.html

  • Size

    139KB

  • MD5

    c83e8e2a7238fb1e12337b8e26f18fb4

  • SHA1

    46885860ee3678199d6284bfdb9342cc3fe52292

  • SHA256

    7670a0cd240e7c1eb6be1e52a91d1e5afcea18c5d976d820a5a92c9ba2fcebe4

  • SHA512

    5f01c29777a9b63b9cb2db63eda1ac95ba1c43f79c2a905f037ed91eb3aff8bf428951fa5620475f344af7e19578222fceb15f8a31d6f4141fe51672d98511a2

  • SSDEEP

    3072:SLJmWywMZyfkMY+BES09JXAnyrZalI+YQ:SL+osMYod+X3oI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c83e8e2a7238fb1e12337b8e26f18fb4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2760 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b554e2fca06843b0155db244096d90ec

    SHA1

    741b99d0e0dab0c9c34b543b3f257733cfca3f32

    SHA256

    d00825945d880671d45c594715930f317a16edb16716966d2653f2466e266ad5

    SHA512

    718fb4dd1d6ff8d81e3f0e63527067cd049ca3342107f4f07109b10602cc750c18bca65357c778cc980512be7637dfab9e68428f8c59407847a3f8de12972067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7986f71e7383850d817fca1d1e9e8da

    SHA1

    a0990ba3ca6426931c8613a0c24299c00411bc57

    SHA256

    912d1dcfe6d8ca8cdd20a0b168d4afbffd8b4c3325b5493a39801d78939c7830

    SHA512

    fb117274a1b551b82ab6b7450f9af690cddfe6f30fb281adbc5dacf1bf73b2ce30082b6935a4c78a8ec75058692fc3b8888e66fd6d8d99bb2b68c380a9b185c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce96e80ec969073fc40ad8cece05810

    SHA1

    c9647b791019bccd48a70658f1584eb97e222503

    SHA256

    236d375513f14fd518dfac3ccce7f01935338ef2354885464c355ab5b8c15184

    SHA512

    e39b36d06eb35e9395199c097531bab0cc690a80e51a04d4612751c284735185ee4b82ae56479a33cdf6eef8e00658443cb10055d3c4f9159e2f8c33ab56d33a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1b58d90a355d9f104568a6447e511e0

    SHA1

    d59187e8b18438c46fa1df3a802879eedd544a02

    SHA256

    c19a7c28936514c29175ae6ddc1524199c0deeb4da1575c0c8dc30a0281b5ff3

    SHA512

    4c2e586dda9fa4a416661137516618255c581d4db3ec4a5f4ed11d85419ed41f8bbb85e7e73001c23b2df87f74413aadd16e2f76eb60e7a3183fc566a2f86677

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb91f5eedcd2cee9901f04d9181bb7d6

    SHA1

    5f9e360aba84e5087d4eef0de39c32f5e52dac9b

    SHA256

    5e95a84aa9d69cd19c3fa8ed56ae06ef3684f6856cecb0aca0f240da8824c6b9

    SHA512

    c605bccdfdab3ab95ea9eef64b4b79e3b9d448e0907c25979823f1430f0d8f506b631157f70028d84b3139b69c76c6b34d9e39d71d3616f707281ed4c5c8ff49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53444730b42b363f69999d0b94cd93f1

    SHA1

    0aeb652f83ab24c5651cc5f7d18f699a4d9d3071

    SHA256

    f649652caaa3b5ba475ca7f3f128192dcc36f472491ad9f6dedb2efa95aed916

    SHA512

    38ab796b1f4e33fa38c11429f61e7413f7f587ae1381e0b8470454d42a3c7e6956b4573ff930906040617f8891a22d2ec22d9c5c2f6cfd93afbbc32b20e8dece

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ee2b97b043cbbe727b54466bbef5664

    SHA1

    a20260f6adc72a437a2063e6f8cf4b141e871658

    SHA256

    9a723517f7cab4eb99ac3effeb4ca274939eb26a439df7a7ef10e06df7e7a83b

    SHA512

    0e4f920f537558b1b226f0f2bec52dae4ad7676417fdb631b2eae9fb9c67bec53718915da0e9445a161a90ef21e9e91b57165ab02b145591f23a9ab8791a0a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ec55895067f974bef930d9f3cab2968

    SHA1

    1d81b8213000a18a3231ad3a92dc5120381e9d9f

    SHA256

    9bebcf94f09eb7fa47aeaacd911404fb23c0fc4a48e397ece7843cab92d79239

    SHA512

    c88517e5bdbeed168ce48c13015f44dc36a373fce2851395bc6b2988a11c417c320d011f97e0d57072fd72a1ab527daad0f27ce0ec04c8ed74be1d680a5ca88c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd9979b4411b220ad9ab63a1c25c77e5

    SHA1

    0cfe1700232a877ec3bfcf56503bf27ed34b4676

    SHA256

    e9759b69df553a6d7f9524cbe5b670af67da72b722c7363c0f42f2dec0411fc8

    SHA512

    74540d0453e078319e227591a6b5b8182e62bdd66423abc170aa1ea846530df15307a731bb5e99e4b0598114635abf92d256044ad87ce6bb9f274794442d6fad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d35dcdf4ca1a6b1ca5449b16f0b7c8b0

    SHA1

    22697bf55a26ac83360daa2a09e3356911125cc0

    SHA256

    892954d300fde9b5feec7b054f6e0d10ba206f56a5a8d6673dc65bf1805446cb

    SHA512

    ffc359729b1c4109611f06aaa2467edab1ac4a556e7b814e3fb2de4e5c64d1a8f68d887031bdfd79cc87573ccdcb865b9d8dd52b6cdef2363a758e7de7a69de7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b95275d87cdc0c2964ff263d2d8dbc33

    SHA1

    44df3f99f3291b50bc665c273c3868d4d8a897cb

    SHA256

    2891b955bf2a34512772e06b8431ac354a55c77b0898e0f4c7d15140d4129617

    SHA512

    1aa51ba875c3a70487d9d6ed951697f2bf38ab4c787831a22d21cf2612204585cac4b9c4c5948b9ff56ff6d024378d5f851ecdac204a946ef98ece74561bdfcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a9944d7251e5a181cddb0afc5b9ded2

    SHA1

    0db306dc89d8a5f294c18880864d74e0ebc03a57

    SHA256

    347ff782e2440584b907efecb67e5e63df184bee81f3dbc90874450971a5e917

    SHA512

    7da724751374fe07d4581ce3a5bfd2cce843a2ff8acb2f69d7bf85c9a7b64241e0b80c90b4c751f291db03a7e0d144c3a15f9d772840d7103020736f6f273563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b519b4a880133711a24bc2239ae69a17

    SHA1

    13c0bc1b4adc65c50498a798211811702f5744fe

    SHA256

    d15f300defbd811ea68358e9cf5a8bdfdef8c79c8d08d4e075e948b62b87b236

    SHA512

    8d8eba82fb796991120ae1ec244c3bd86f8736bced2460e8c699641ef408f7503fb549d1b3463c206ed563d03038a512450560288c752dfd68a0053205f7865b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff9d058736883432e517c4f20c962d97

    SHA1

    6da2094ef5d5a5c0927f0bdb00b21e40a44f87a0

    SHA256

    b7385b903187992de9cc9426169522797d59ee205de7a55c20d0477dc2d9f9f3

    SHA512

    ddd384b30ec5b5626f1f8e399fc820730c811ae23afa7a3dba680cd4d832c8377358fc9643f90fa0a431078c0d0bb779153833beaa2d2f4f8ac2ff21f8613aaf

  • C:\Users\Admin\AppData\Local\Temp\CabECDF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF221.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b