Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 17:51

General

  • Target

    c950ba5d1b23fe02bc14522f4b4042a4_JaffaCakes118.html

  • Size

    1KB

  • MD5

    c950ba5d1b23fe02bc14522f4b4042a4

  • SHA1

    18e9007bd4995420704a38b672c22e33f4dff65f

  • SHA256

    9290ad04814a691656570ee4fc07e7ddc27da05ed4c0c18a9f7ffeb4fc74b5e6

  • SHA512

    49fb0849a4184ba74950cee6fc7a65d8a9170e7378bfb30a23cca73a2b31c841616146f79b65a39dc9536b22207c306b9973e6500f386c448548d49a71a623e7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c950ba5d1b23fe02bc14522f4b4042a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2584
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2584 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2424

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    301f9819b3a91ae8c69870dfb8e24f6f

    SHA1

    194e02fd4f4adb0315c7bcb47ce66531b2f5e6ac

    SHA256

    65afdc6e9d79067bfe57e68c4c512f8d5b0d791c44c82c039a2f25e41f7637c9

    SHA512

    cbd4e2b6c48a9c0f8df89143f9ec73658de0a2d803df00b462fada1227739ca20179a30bd3188c77b9e2411a4fe5ca91ff7ac01cea4f6d262a9bba1b64798e63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e920071d574cdd231a8d8fea6ef3bf2e

    SHA1

    0a783f63821fbbe4f479dfd132590d957890c878

    SHA256

    0f297682e82951609969f9f546345ba4ac6acf9646bb1f823b83c8f12b7e12ef

    SHA512

    b24233702e84e857312d07f35863a6ca546eb4d1f8ed8d32085c603e70fde2fb090c1e6a22f4cee3d262f0d837035c8e7d2241cb1289a533c996b3aec64c92f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdbf398ec7640787ee4bf354daf3cd34

    SHA1

    386308409c4b8ca3e037b7e9a70e49167aea800d

    SHA256

    44e8219baf55ae2dd094ba7df317cd8dbfeaeb9c03e022b79448d1150d462e0e

    SHA512

    f2267debe9718687e355bf2b2b24ba4192e6f358253d3fba8e429b9c539b8873aea53005a2fcb8bf9af81615ebec9d99a4f0931ba05eb6546a569df2fe2a59b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    befcae60862fa06da73fb91c785af3e5

    SHA1

    35544ec3ccdab53e5cc5ee4f47d9c6a684f6893d

    SHA256

    f4a58f4f6a699c58f1cc0849f4b31a690f1fbb96e21a767fd9aee71ae66c32c7

    SHA512

    4414180b57849323d2110c542d8138d6ec802c4fdab0957af279205045d40d6a0d8a4b9545872e5e5e5d5c5c5858ee35a5f0f90a8da7fbeb5ae7ae6b98029230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb76eabb7506d293bc7f0a30bb061854

    SHA1

    548a594d9a80945b7a96ad3ba52ee70821bd167c

    SHA256

    deb581f3b4cb79c3df15a8c43c5263b6bc6d246abfba5f2543a6353e8a91cbf6

    SHA512

    4062df99db336661384ae0ec144c298da48a941500eea37aabdc069c4ca2fc0cb9a9d5261b121e13fb4379f2172f89074381c7c5bb40bd920b29d6cf15a53e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20ee592699c14ee14825261f8479bf07

    SHA1

    94a76a80d067558dcff7541acfaa431d88d432a6

    SHA256

    c68758c078bad1f9eadcff05c8362898e5b91b409fdc09672c8f3f0bee2e6004

    SHA512

    da632884fe09d0a861d5c517bd06501f9e195a41af3f99803fe28337c70a6240328d27d6b260ff3579e4c54a71da84117cef0f6e4abc6874697803cc3a526524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80faa9bf745dda0e4e1e3b6a1eba75a3

    SHA1

    b3f59b82cf4c2d8e483addc5992a0a86b07f5db4

    SHA256

    8835ef0a64d8ecef096869af3477b11a47f9df1f18979ccb74e2948adf3badbd

    SHA512

    9a49dc01a422abbbfc6e7dc9624434089db8f901bf2fb60e21ca92495f16b0a3aa557d49bed7f489cf875c77216c1adb62b1d9f528a7426024456c937f07c5ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68bcb709b8d745cdc931ee1b428af17a

    SHA1

    a84aa27f4dcd0094a547e96082d6a1c6362c3579

    SHA256

    419084fe488cca635f7a08cda843a31493d75f21640e0e20efb098e619677682

    SHA512

    90296b114073756e470d13e1e7bef498dbdbda7417a5136b23f45b6106b41fbfb4cb0799edf18099b09a464b79e02cb045c1ebb064375db929373a2c3c3f8e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3c23844d0d46a816c55dd7835ca0ef9

    SHA1

    afdf1847e0bdc78e167c925e51c7a79f92c3ffc5

    SHA256

    a15a5f2c44488455ee346391ddaf09c19e147cca4a2d5ef1a777891113f93e3e

    SHA512

    46beb698663d2793fdeb9148d77e4c44a7c92d145eac8373ab301d1f5b4239236a4b67af08a6d45f863b49490dba9a1c1b6b9ad177f9c0efa5b3a32b1ce0a117

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ee868eb20513137542a46f9069ac300

    SHA1

    0029bc0b1a365b1445fab9b1b26fb8d9531bfccc

    SHA256

    b00687f00e1aac4cb498e87917872cfeac837bbfd5d9cdd9c25eb75b9d125391

    SHA512

    e185fca1ef4ea75b16f6a53ddbe07516944ecdca28e0a5346e281677d4b7c92b4c027041ff6142d4f5e820de323616b36f16cfe9018d124d837fd081a4c80dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3b4f1cc88e969c683281d3371546cfc

    SHA1

    7bcff1944fa03024b21feaf5caee7713a8cd7c71

    SHA256

    2bf761c7707d036ac26da8c403b4f461c81337d7bd1aca1fe753e789c0c30077

    SHA512

    b1a028e5a939d6cf5c6d0fdd860cf59f1c876007f15c34463f72abffae5b5d5e5fb3d8e2644de931b972761af7b64c7ded7f8093df8a9428a35f18ad1c8c987e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06d541691361b1620665762542b48224

    SHA1

    e48b1dc59fc31c2978f73eb50453d72fb698c5b5

    SHA256

    38afdaf4a1d5e3619414ce4ed13c65728a8b58957ec08af16f6eb8af35d1f3d8

    SHA512

    f34913936698326c5cee7471f52105420729706d8d4c32f1f510c0e085709ebbb550eb1869e22f8d279ceb725765243a729ec934e73bcef594e7c154a011bf49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a97eb6eb925f0435471403e234dc5f24

    SHA1

    1a3997f7b0c2a4824e8a07d450545900f4935199

    SHA256

    cfb574ba7ebf085321c4742571f45b55943ea301f816eb030c12d6969250e697

    SHA512

    73f650bb4e8422b88accdf508daab65c7096c2878ffacfffd1c90dda8ebe62b43386155eb2c30f06c5121ce0e572767c1698858857ba341306876fc3518364b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17b2ba5e30126ab52ed06a2584aff335

    SHA1

    c8e2ab4cf689f44e37528462467151bd79a3a2d1

    SHA256

    dc9e967a8649226424e5dd4ee6bebd1a81f4591da6beaff2e2230b5a0b8b0446

    SHA512

    7e1e662e75caac650ee4f5342a58d33c10c5a144e2c16cc7e55c4226b5ce5be11b6029901b4043c3ae4fc6a8ed9e9fccb6842b83d5fade805a1185ca8d1764c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20cb764152acac124f9a269e2014551c

    SHA1

    b726c7b8b9355f086329bdffd926b07aef379966

    SHA256

    c9dfcbc5b26e55123b65359507b7aff4e8e9c93bd6cfec796f27bea8001a292f

    SHA512

    6d9266ffd7e8685567aa9d2df5a22f1e0beee56182a0d90bc67d8f2953c1c83b137d603d857f085867cd128555196dc29bcac84fbedd35185b65ecb9b7d7ed3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c03ff28f2d9c1a8f0985b2ac3e1161d

    SHA1

    5791026eb09442202144859814a81cc831cd4e0a

    SHA256

    1c99623de91320dec3f98dd723f3e1dd97afc8cacc4283f312bc7fb6d28c9e6a

    SHA512

    c36130bb815ad83a52924c2d45a82d1b7717c45a7aad77af844ad8c0e0f6795880e5fdee0b1f10a31ffa6bccd8fd3437bcc37deab1fed2447c2e8ff1d248da8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47b871b71cd9c6ee55f49eafce5f2965

    SHA1

    5dc0ff1a63591ae46c607469c30ad4973c7a36be

    SHA256

    4c7e992ee0e96461873725fd975d2c3b38e3d99c1ad99851131577376cabaaed

    SHA512

    0c6561964a273dae226cf884cca445a864390f6e561450706e3576d8260bd7222b7e52b3dff978b192816d20e333515f99cb0f92d012b92b36f884ef1067d0dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    808bb38370f583f53b5e8ad21b3fb165

    SHA1

    15a56cc3788923874709f6dd0d5edbd1342d0e03

    SHA256

    83d8d7497dcdda992f621e2ce5715e611252f8ada5a53f1d8976ee829f2672eb

    SHA512

    f3d3fc9aa04c84dd3dc5aa49d1263fba7c94ece58e581446cd6fcdcbc1e4537a72ae4702f0995af7a43315c6dc1b2bc5f117251ac78c7dfb781f5d5d1881a124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ada96ee1d7ff0811688ff04f2e71e139

    SHA1

    1d6f17d752d468fbe0af058a8bc430ffa30e6e63

    SHA256

    d3aae7de00431abdc29d0f74763d1d2ec6d75f442032a0c1cb2ddbe44c440c34

    SHA512

    6ae6e44aab94bdd43fe44a52b4826b608d03ebbac4cebfcd12875e2851a984970b9b738a5fe548058c1a2f2c9d94f117b6b8f45d7ff7ea1c9b69f68a4b728b88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    650b1068986642019a543fc82c6358cb

    SHA1

    5c8aa8cd144f4c2284690da6972febbb4ab2cd51

    SHA256

    5a92a18352dc7324c38c37e49a42cca641041810c62933df3cb837b4e272c301

    SHA512

    1b2865661dca8fde2fb5c19108093fe8314077fe34fc7b097b3049720c81584d710a4d0bcecece13264e7a5a153cec0ccf539ba498d0ceb3b46ea58581f9b990

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b35eaa9d088a71634c9df572c0db1b55

    SHA1

    ae670a691330a1aacb5cd6cacb5ac821a3fded56

    SHA256

    9c8f8ed7d637a78a9bdf8b59a7ede1505c7fc26b86decbf030711aeabef3da25

    SHA512

    d9ce65b1e6d5e8ef1fe75da46a22635d08e29876d6005ad0d53f81f9cb7746ddab75a372994a135c22f4fa057bba5324cb0c04e1635a4dedcb967c435e50b0a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79fe3ec06c3d83dcc3a6a3a4285ce08d

    SHA1

    8a2156a4114f485abed899b62349c211a93c8056

    SHA256

    5dbac504ca4f98ef8f8d8907846e318d22a51397eb64b6bdfffb13ac195ebfda

    SHA512

    385a034de95c590c782563e0e878895c9ebfd748e90738ac948f5823052c4dc43ace54153feea1bd5fd1b258ab0552729f6c12a7862e30f364229f149eeb3bee

  • C:\Users\Admin\AppData\Local\Temp\CabE65A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE6CC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b