Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 09:58

General

  • Target

    c89a891e21e20742308ae31840789b9e_JaffaCakes118.html

  • Size

    162KB

  • MD5

    c89a891e21e20742308ae31840789b9e

  • SHA1

    14d2179ec889811d501856b3edd06d16f306b28c

  • SHA256

    a5a485178c54a5b1ea7199f925ce3bf45e6696ae4c82fe7d8ecdc1e1ade4673f

  • SHA512

    c2b79a1cc078755c50a866d7fb8d89eca8784adef42ffa53aa314bb756b2067d308f2ec688a4460c4a47aec8184f58ee7a86fbfd02eaf6876bc983296169de2c

  • SSDEEP

    3072:S6tJTc4JWyXhvGVIE/og84wrpAPp4v02cydHznVCQOT32ucuyfkMY+BES09JXAnZ:SmPJWyXhvGVIE/og84wrpAPp4v02cydv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c89a891e21e20742308ae31840789b9e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ec2f522b83368ad21a910bd0c55df66

    SHA1

    716a8424a01c634749223209b7f156255bad4228

    SHA256

    08f5eb62b6d4adc980ac35c892842ea3674e166da0c6fb2876d24cb4460d5e8c

    SHA512

    6d51c2d17d4eb84a3ba9b588477a522cff93166969ac7103e22ebf896f556979eb50c9e33ee3e0ce7eb0b4bc0cb88f7e5a38069a162ebf323c4a500e5cd3938a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7580ba865a0019fbafc027a2461a1b96

    SHA1

    041e9ff96aa52b41203d726b7022b0ee18b9474a

    SHA256

    a93046865d4f4e5900024c98e5a1f362aefd70c74e39c13de60491d06ec1b8e6

    SHA512

    891dc404720624e3f6034acee8b2fd15699767d47614cd8efc60a0c2d09d96ac1c9f0e159469e708d826755a07fa39b1143074559739bbedaaa88ae790f872ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51a27e57a4cac194a8bc4ab1508c45f6

    SHA1

    e6838b65bc3ff972740e6e006b61497ae8206ed2

    SHA256

    6569857b821049ae23d2f66065ecd46d9c64752f58dabf3a4366fc8cdef25c08

    SHA512

    389df5cbc82a7c598dbf7980d9b4caf80313e7cb63560a801180d7b26f26681ec4e50bdac13cd06944243f943bc6b13bb09114aca9e8c574a909685198115b61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce52036e2ea03f9efd073967ba066b37

    SHA1

    64ed14aa58ed3c4d8991129307bdf2ef9c3d014a

    SHA256

    3c6784a9b785c4c3071c148d615dd1a888cf4ae6aa7dbc389007b75c3a13b7ba

    SHA512

    836a3eb63c4e251360e165d6babe97fadc979cecaccf9ff26766c0b9e6615d4431ca93bc79652e5bd2afeca6d0874e55c1b378fda0a46265519c207d50c2b3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcdba796eb998e3fc3ea38c49a80161c

    SHA1

    e65e2ceb7cfe00c4dcc2bc2eb167d8ec4990aec5

    SHA256

    d7281d6119384706b8c17ce0aaac4af7c7a859eede9390940341526fb97188b5

    SHA512

    91d3aa3834552ae1c0fc5d6fc742778937ae092baf2524147f77c6e059a03f1fe16ee6580faddb2bc09b7ace4f86d8984fd05ec8fbea158e35f67bfad077834b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19151e72dbcd79c6a313f07bb9750013

    SHA1

    6143b1f25778b8f654268217d7fd62ea13aa3c32

    SHA256

    dd105c187e05d41d3eb2ff0bbc6a37784e75d7ba93c54305bb64dfb8f8f6e5c3

    SHA512

    af0865dc0567486fc229ddf8ae5e546e1147cacc6a4e856866c4524dc12f8a7f44365e26d79f7d0a1cb81312ec8d6e4dd9d242268e86062352e48621692e5a80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0054866b3aeb1fb1f4649547585f4a6d

    SHA1

    c7721f40496496e880da07d336a55492e46e38be

    SHA256

    194f5e6ee7b2aaad18acc71615f219268d00bbc43fe8a87bcce62d4ef9ed7dd6

    SHA512

    7d25f780799f0b8f9da372463019409241b08822d4dca868ff841aaced533e98dd93a6fec478db8987bd078fee61dc00eeb3b65706f3dcb50cd105b42f5c1193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e36ebe9f7c5ddcfd68d17178fecc6d6

    SHA1

    1f73c60a6d0a27a71f2ea8c66ac41a9e670e78a8

    SHA256

    5ab6c9686ac6abe56839619956272226be476a6105be85a4518fbc5f7caaba30

    SHA512

    01ae322c097a02c68f94d15b2805d4743435f503ab8bdca8c14af3c7b32233562396e57c7bee96c44a4d5b5fe9dc60f67c0fd7d4ef2163a2d29cdc80b580d230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83c6ad5e03e9786ea8a36e239d57099

    SHA1

    3034b99211abf407324392628f909c56508f7632

    SHA256

    d8b664cc0ea02a87603edaf44dd61b8208de1704a070e346c1baa7ccb1053382

    SHA512

    a4e126f3d7b3c1af786447b462f79559875a4c03fe44fd510c5f66463df98bf5170f7e17f5d40599ef72e938af7f71b92fcc367b710ffc2ef59fc62a7f4e01cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5550aec17847cfda5a610fa24afafe3f

    SHA1

    623ce09132fa7bc53a52a48c5bd94401d327cd7e

    SHA256

    da97528943a57d29516f46bcc3aac328a7b3b8bc9bb7dda25d4db8cecea0df45

    SHA512

    0fe310a3d444651b95c7a5731f57a33e04629816fb35b2872752d0072a8deb7e32f6f5399389834dd0704cd0cc4d8e564abdaae391dd21f5ff51958bdf4fa641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ec8b62109e65ba75129aa036e7f23a0

    SHA1

    1ff99639f554321c92dba6e17ab0337e2286be37

    SHA256

    a06d8f3a185dd1ac617de91b5426ece3ef546462206fbd9acd0dfc400d7ee766

    SHA512

    d2dd1cf85e670ab447dec6d1d51d81d50bfd7d57ebf5da41a42b7411bc71f74046855412b12750704601bb2d0dd4ad3c7f77b6d81f80306386223caf5879cba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58332492d31dd841771ae3ab370b9332

    SHA1

    47fe8a88b7575d8f86dfb00fc713e4935cddf1a5

    SHA256

    8963c7368e2c41c9a8ad64cfcdd39b9216816c32b4083c15472f8c43cbd6a211

    SHA512

    76ee071707d3b146c110267e2e13e6f8febe302c9145ff39836a85de6650861a381b70a652ffa2c39098d7b481cbd02310a45a8be5d4994cd749328555c5ea27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdd6e3d4dd202979545e501eb1555a55

    SHA1

    ac24808fd54d2beff0622a18922fc4a31347703e

    SHA256

    8e0b087fad5ee1685bf66aed2a5e35f868eed8e855fe702086b5df93c07067e6

    SHA512

    5830691f84830753652c4465d9e7b50c6e33031a6b1e49fb8f9bad71e5df630f604b5544978da5fc988d63e9726f40ba3a4db5227da91790418a1f9127f86d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    322acb4e039479887f88f3a874605bd3

    SHA1

    2ede970ac28e93161dcccc2cb87704a5f77fe660

    SHA256

    bcce809b396607be9b67d60cb609c55936fbaa8fbdae783ed45cf1949e98d9e8

    SHA512

    eb0cde5fdb78c5e3014e4d9bc96c43a79df47c0f8aa4bee4e53734a6409456758e22d33274bc0441d1a82d0658de702f6f151822915d5b692ffaee61d0288069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e90fbba4e5d20c33bfa34db57016dea

    SHA1

    fae287492d14d6628736c627b9e7073bbf39d633

    SHA256

    30bfb90721c3de1c085eef0b0d8802892f9f5a9f072301f73af9fa490045215c

    SHA512

    2c745f4775bd984452e121a67a9af46d6051dd52dc71cafe4481d0806ee5853e6678e3d2caa8bb77afaa7f98f16ab480dbfe7afcb4ca18c75300652169572bfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    612c1b4577a3d9844e4b8defa5a2c834

    SHA1

    08a35159e422b34fdbea8db9c067800cde2e64bd

    SHA256

    406dfe28f89908e55bf89ead1eb1de0412955f16f750b89ce6af7d70786b12c3

    SHA512

    26ab6224b34e027152b90aba1829cb104ad6017f602a5d5dd9a02a85302969618e3142dbb2745ff8ad0f04efc203a8e272b7c9521ef03adf820f80bca3544317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08ea10083abaca4442530ac6e6eca0e3

    SHA1

    83e7aacbbc6a405f1a1e250a6bb418deebccc4dd

    SHA256

    7c3bd41b688ac5ebe8ebcbf4e9420448bdc2e8f4d4b43a559584ab4c9e7da64e

    SHA512

    b681dfa1ba41170bd0cd37ae1ebe0aa9358f63d6971f32385d38b2f1e010f6db4e6fef2569a71a790eb7b438d7831ac43bc4d4d698ee88b441d7a4df7746d0c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b3a6e85071fb8a7beeb63f270ec733

    SHA1

    c694e960e33ac29fe1f9785c8f0403ef260df3ec

    SHA256

    cba6bc66edf35b60438dfaa2756c46d3dbf051457d5557b7b3b68a49f20324e0

    SHA512

    4c5f7924d1340dc0af3f597e57a2573df5530618fdff970c249758707d8559e550929ee2199aabbb505a45b058d478c6837506e863b1017b9fe0a406904a4c37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e368d0f30abef339cbd910ed728a49b9

    SHA1

    92f88c321de7711ffe5efa1efa92b1f9eae4921c

    SHA256

    b4cca2332af571156d47ae2c5ecacee6687ed7448d0360106cc51dbd435ccf18

    SHA512

    4b35184917eedd6db1a75b685863850d1913e007e1b164db9e750dfc4a3db850e083b6758c36a27073e1c51cbab3faf02d2b7e7b69891937a440c3b0e8aa111d

  • C:\Users\Admin\AppData\Local\Temp\Cab1D63.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1E21.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b