Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 12:14

General

  • Target

    c8cc06bc57dc35312f00ad7e4079ea81_JaffaCakes118.html

  • Size

    711KB

  • MD5

    c8cc06bc57dc35312f00ad7e4079ea81

  • SHA1

    ec5b1aa84ee1fc6f2b8f03ca91059ccd46841e7f

  • SHA256

    70c67ae451a9780ea157a21481e7da958ee13a5d034baadb363a433f98c9ba42

  • SHA512

    45a4c9246aaa1682a9a56d3ad659e7b3fea7963fea89f7964a41455ca3f1b65372d7eeed22b72e9058771e8e49d6464b21f9890df0c3107347031781e5687f5a

  • SSDEEP

    12288:HEmk6VPuBk/wqageDn3vY+zOAPaiHlBrRXpOq:HEmk6VPIk/wqage7nbH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c8cc06bc57dc35312f00ad7e4079ea81_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1604
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1604 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    67150ab093b2c11974d02b74093611eb

    SHA1

    09c7de0f24cc8007318cbf42ecf63299652cacfe

    SHA256

    15c01f11b11fb06f3e5ff8eacb0d6d83c593d2b72457fce26d822f34ecc44483

    SHA512

    abcc0ca80b777724bf53fc4f6f951ec801a6cb7ef8caa2b83a706236061e04b907d17afae4f9630c81acf27a3d32eacdbb0a9457b1ac60b2570b037f8fb67bf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    879c8eb82b4fd748fb611e77eba08612

    SHA1

    35aee6e5948c25f5beeb41f86e31d161d618a3af

    SHA256

    8e7235d9d781edc329238c76275dbda94b97a6aec259ebaa278b129e65abe4d3

    SHA512

    007dc3be8a7088e9a7f11711e5a523226253cbbe1fd14025dc6dd58463dd65f209a90a6b6e5f7f89383200849df99d7a8269ef6814164d360ba316d74e55751f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce574a9b3024fdb77197e5ee9f3a9afa

    SHA1

    849327fb2d40194509efc3bb80ecb5b2964a49ce

    SHA256

    deecd3fd95dc9f519f4d1a8b38ab3aa5e056893ce784a27eb72f33e6c3c15f50

    SHA512

    3b40029f2ab3ea1ab2c9a28b7d01083ffcfd5a2b127c24378d18826a8dc1ea3d590492489f2b17973d1210b9e9394f50e1d22de91d716366d691d939053e0b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f371c7b6fad45881aff53083ee589d3

    SHA1

    9b81a553b06bfc30dce0c3b8c837176e5e0abb2c

    SHA256

    25047cd336385b133d252302b528cc9ccfb106dbce694f061e5c475b71ff1002

    SHA512

    aff473a7d5b93c0e854fa930c434149446bb411193cac664ab0f75403e203127df5e30a0bc3d5ba7c03605e094d8e3c73e509a74d866238827e22012917649c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c236cf36f48348534f77221f14c4eb8

    SHA1

    89a26840372d952b45b2bc36641dd5c23984ead4

    SHA256

    2c3caae613bff631429dbfcbb4658f234468cc65149b9cd66601d8b9f68b3a04

    SHA512

    814ba02219d726c4f105fa53375776420c01a86a7ef8da613c91952f8e512d769439650c90937fbeb6dd4ba2874f6d5a47c8644dbd78c897c6037a7e8a58da0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b883edaaf1142a14b123fa5e2efed43

    SHA1

    f170e3636aa6fd9aeb7f9175fe12514e27b4d9b0

    SHA256

    df80dc025c75deebaedb0e3fdb963e13e704de987c31344efe2d7d86d468c947

    SHA512

    933bf7ec4eb78186cd11a4f041e686c602c03e81d19b26b352f232a55f68eb17b45183418d7e241b3189951a7d19aed9f2546e34425c2d9746fde60d5701c5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b12c78b434d9d5aa4cdcf37fe62c8c99

    SHA1

    0cc813c9c50114d134d7487672084eb64cd17dc0

    SHA256

    df46465861dfc9c870e565b8cff49446b9bb45140a37e48155974b8e7b199649

    SHA512

    f2897323ec2bc2120c2912939b162de12ded77abfbed22ea27a4b6c0f80ad0bcc3a2d7361479fda8a875e74f74dabb75e86e723f8b8a3e7b8e9543ad7389e174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8cc793a8ffced7f1974fc4b1c90fa2e

    SHA1

    d5ce6718a11f9075d04b01c4fa604c0e1869083c

    SHA256

    071aaa26b564cb1735091b184f2a2dc2e966a4b7d35d7b6b61f550ca7f1533d8

    SHA512

    4745d20229f552ba88da059648c3c794f78a77ad1e07ef48ee8603a570d9654d06a282b0c33903dbc87f1bd8645fff868a22f0c50610d30910d9440bacf605f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b4c1977ba659023bfd20185a3445690

    SHA1

    0bc8480be9cee362c77e72b653d2fd4b6535e98e

    SHA256

    394cfe0f4a339327172a46c80e5a2b596c78e02722be7cd7584ed4a70a77b06a

    SHA512

    bf94e58701ead17d6dfc81849d1b6750bd2064791a911796be165160a9584bbc7ad4ed3903f63d202a93171d65958caae95a11d1a3cb08777f7cd4009827c699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ccf1756aace51e4d24b7a80db12c6dc

    SHA1

    da635a28d2466252b64816bb908082c931972313

    SHA256

    1fb653a3b7913d9478e8b3f8ee84fc8a76121f86862ff1a3528ea312d13736e4

    SHA512

    f5e0488c2e3bd4d8eeae89b3ee9fc57bbc336b6f5fec59f247c6fe2ea1b01b5d792ebbf779c77bc81176e874d7c094b39aabdb3ae3ce46d623ebe9760bf13b05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1a3849afb5d53ea6d9601fe2d656982

    SHA1

    710cad28ff899401b1597d7e27902e297cc89a1a

    SHA256

    1cb3fba52148622f128df9673de7baeb7a5e00c3c98292d43c93263a737a6042

    SHA512

    94c9de404b090adfebece5bdab7a8e9650cebd7ec616ab4def697be7ddf6f2d99b63611db512f7b5f6b7b6d40e78d0b62fa4004a97f4c22f0956e75662b18f21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21208ee7fab29543652eea5051718cdc

    SHA1

    7bcedc3ed2cfb8189335dbc8e9be8741128964b9

    SHA256

    b90de202897e6b370585519c035026272220313542331b4175ef4010fb604f27

    SHA512

    6b83bda53ecc54458423efdc7f247294e7890033f76557539f7928d37ce39dafe192a2452c4fa9fb9a1f899a26dd0baabb09df12a5ea5cbb66e7f3081ff1f4d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fcec013f326d14147c90fdf9bf54a52

    SHA1

    2d73b7cb508cdb4a9b3dd795e5bcb5c5ec6f4454

    SHA256

    e7bcd9e9d10619ce675e9015bd6639a351b149f4dafca45bf256740ce0fd8abc

    SHA512

    13c4fe42213eb453f5e1654fb08cd7264d78770e0e772aabca6b5d287023e6a27155b50034d86d88e3df331ffef940f35b2911968d7659aa6c852ae3b3e984da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cd880be59079a15ccf486c4f890843c

    SHA1

    497fa897e8dfb1374541200d0868a412bee4dd59

    SHA256

    ef5050b9d84c8f354f0be6edfbd2b237ef76dfb987f22fd3c59277a9d00ddf82

    SHA512

    8b7d70c8eff4729aa198d5b686e0008747386baad0db0b6ea763818d7494f2a80ceaa82311c61a9a2478418831fd37bbe71b4b66911cf2d28a3ceed141c95cf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f650c6985aabc808ac59666ebbdb23d9

    SHA1

    922822ef13ea90982ff845ac749d6f003f1f9cbc

    SHA256

    3bb655a61d1edf1af6b72011bc80caa5d13359e1048947242a514650bce39fa6

    SHA512

    5395e0f591390098eeaf6c07116b858f9ed907f795670a7d851fcb744c5b505a798135bf03ba487c46d5ac49232534518704a789247f34e32cafd4aebd59ded9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e44be1227bdbd51ba3162d043523bc35

    SHA1

    999338a4e3b24c2b08f66f22577dba87312cc941

    SHA256

    3ebfee5ba906d463fdd31e129302ee1e955c77535aefe97aa66241e11c9ecd01

    SHA512

    6cada0cbe7550967de8a9f45cc4e96156f42511fd923b30f4e64754b6ff579342b6aa5fd13965726dc1c0ece65a20d4885f58adee83ff404be7b0148412a6d46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7455edc6819af9da9f25299dc986cb36

    SHA1

    e1fd07be5ea5bcc5f93b5c6e6026122ed9980628

    SHA256

    89e97ea52c9c5c02ba4547ad45751dc4bf82822f12fdcc32c9e538481b17c7e5

    SHA512

    9cf943be5a98bd1a7d983bcfb7039963267d9b84d1935e45ce5969bb197dd637bf5d82a7765f04255c7c03aebadca982f8845245c497c25d4e6bcfa6d4fc7aaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e593b17d1f35561addd6f4fd78655674

    SHA1

    7432dba097184b5abeba67eb7b78120e02e7a859

    SHA256

    c583a2e7485c1fc960de99c5aa746c0a3735263042ba20427440ec4da4e374dc

    SHA512

    cb1ee9a75a489453cc44b3b0a0edc89e6209b4c31b40f0481d1d91ff6c3232abe987893fcbfd771cc0db027ef76c20d4a41b835389c92911de60b587c4644764

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    028d3605acbe3e711fd3132d2ed6a70c

    SHA1

    76cfc45969c1a9f6b42d5707487d9fef859b922a

    SHA256

    7a1f9199ccc8f88fa44fd0eb161551e540471c03ba1f447182acf08f65029a89

    SHA512

    8db1e16389628b5e8c5e44889bc24da4be0abba4fc83b43574a1c94c9a1d9bc66c1d3b02c949191cb7882b7fe348ae13ba2bdb8fad1c7e558828098e9a354f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c16234fc5d76dd08c4659e7f236ae54

    SHA1

    b21a788c0599515004b143fdd65432ce8fdfa812

    SHA256

    4008ef2b93b257297cddc0ec6954efcb2603ae4057474c48b7a87ba6d22e0a70

    SHA512

    5b9381da8ebcb8d127d1c6a31bc0a8da588e21c64f7566b3fe6752238572114b44a8bb2ff2ce2bb0f644d8b1a28ff23b124c4886fddacddcbef4f1d606e80e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4b2e4605b50a8af95eb756cc5c8d72f6

    SHA1

    0c11cd544b2bb943075b526cf86cbd70071a8e78

    SHA256

    f89ad99f3bf33bd7d3d8960c31e5a9558aab94383666810207abc52d8a28e121

    SHA512

    2a6379bfe7ea7800908d365c3c10354a67fee9d44299fbd38d19e0f8cc8e035bc3d79f8bd1fbdd3726c589230985f1bf7f4e6d7702a0c63ced0839f94def006a

  • C:\Users\Admin\AppData\Local\Temp\CabB2A0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB29F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b