Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 23:33

General

  • Target

    d0a6276cb96fd0094b669503611f1b79_JaffaCakes118.html

  • Size

    36KB

  • MD5

    d0a6276cb96fd0094b669503611f1b79

  • SHA1

    c8b1613730c7e5f0fea0365a205afcc4c29d3d90

  • SHA256

    fbf61b43f5e5639fbdc3c01b8ed42a9b94b08193f09c85b78f855f97117d36d9

  • SHA512

    9c0c5060033a5abcd45cfa12c32642ebd532be1af9407f7d64d731f4fddda6116054e9b82e29ab07d50ea84c314104eea2ab8019a23d6e67d44fe01ec8028a50

  • SSDEEP

    768:dATWn3VnJL5h3Dk7qXT37m5z5qMKQAPfp:ScVJ99Q2b7Wz5qMmfp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d0a6276cb96fd0094b669503611f1b79_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ebbaf975a1543f51b0b93d11b1f5d74

    SHA1

    01812914109e8dac5191d03c6f07ad0db031a9c9

    SHA256

    5c9e24c089b16423fa55d5c09997451084870596cb8489e3e346379fa90a2842

    SHA512

    79502000cbb01d692a953150de0f2056a546879c0eb794bf46914b1b8188a367064fd093d6a78df9bfb82853dd685be628df6bb91f9add0b79b83e9285369cae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    378ef20dc9deb6f82d8a42b89f87a8e3

    SHA1

    77834b02ad5d672ba7570bbd94d6546374bd307a

    SHA256

    20c2590a584964dcd280b2cfc91f3e6ad0d70e744c5ba6dfc482ea2b68ff8956

    SHA512

    b83e682bfbfe08d486aba7e05ce0aa9f86e814bf02e56b512ebcf18f0a319e36a059394838a723cc81ed420f258c943671179e2c13b2bcddae52ccf1a365c9dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01810ec89aa225a7111b632fb24d63a6

    SHA1

    31a956c5ed92dbea3dab6cc28d74ddd598724e47

    SHA256

    351478dba3d121d1b399c90d19a41aeddbf918cbf3ca909eb7a95b7f1ca83d52

    SHA512

    a4f3af69086accc334d9fcfc3881567776eac707fcab5e3e1ef3eda4ee36baf010c9dd28f6e701ba9ab98282d1118ee82b533d3cce1319309144ddea88b281e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    467639d84aeb856a68f1eaa5082d7731

    SHA1

    8d44c28a5b0243a8c7c87531bbd3cec289e6f894

    SHA256

    24a0a5d332c49ca3a00d40c94322ca6fba90afe9800a1a67ff57d86a3fda1669

    SHA512

    8fe0389e106c697fb69abfe31ab9ff6a2a5664c590484bdf6898762369a6ddaab2d93c24f651d7f48bedf09e919311b6eaa527fe643ee992e1e129e401842e60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    819be9ec477318d97be19e03e3d4dff9

    SHA1

    1d698b74d7bbf70b3524e2e0d9f9938d9712eae5

    SHA256

    6bf1f8ef3e5d5993086da9c71031969a8e7b78c9be6ed8ed871eb7abd4a9cb31

    SHA512

    99a2693349539397c59164618054ab995a0234da7ac65aa01ee7228566a905b2ee66e4ac0079c6db8169e1719cd8ee5fc768d69cc4def8de5b3fc68ff73cd676

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e6e4dd8726cc435c1d43783248ab0cc

    SHA1

    67044a068c0af31be4d661146a57113b2107dfed

    SHA256

    d305e7837d688528b8b731fb72d3c40e0a036557eae82395c79808b9a82015c5

    SHA512

    4e189042a7f8913b56f2dfe1e3db0b29b87deef12ddd09098d3365f203059103f15ccb48ef40c6d6fd7f5d099882e4ac87d6f6c196990638f4f69f5a6b3b0ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1720a2e75a86dfdd650a0fcb60f0661

    SHA1

    6ed8954d5a8527170056801df32bec3dba922d9b

    SHA256

    b1be6d535cb4e3910dbbeeee2d6d8392f55570d56e00f7f6b83f2c0346de7a2f

    SHA512

    e26ba47d8b7d34e7f368add95e9c8de0c11cafe6cd25a70cbc07a39a258b1c49358e7729b7b63850192b81f754c38574a353e277ab6a921859e62531fb96e5d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    981a80ef117caeda478b5f9dd8b90589

    SHA1

    275392905d9284548ae7d23137eab5479c1b4b79

    SHA256

    7d233c0b39ab46317f1e3e237aa4601477e474b3a975774faaffdee4b96446dc

    SHA512

    7def49cfebf445060bc8125ec37854a0049cd8c159dd4415e7029f2cde14f9fcb1a5f25f5d912ee4ea14d075ac213c4cb1f3ceff5d117e77dfbe54873e7f072a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a93d3831fc2998725d3db09d2783010

    SHA1

    23e4e2695948b2829534de1221dd2deb79f297c1

    SHA256

    4272fb7378a315c40fb77b7403ef5fff167f293cdf2cc92690bb4820c8b8b8ac

    SHA512

    1ca630bb0a0e1460f8e19d5279c7086dd79329912459315f5652c78d224a4916010cc9d334e3e9b6a7ccf22c529a23c6c0827e8de78c2a7a45c99e388ef77c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24e9859e902ba065f68b7c8d519157dc

    SHA1

    1ad045cf57c98ad9f6152f10516aa980f3bf9ed3

    SHA256

    e7ebf3cea808320ca87404ca212de45de9563d5e6f1f284b19db12cac6dcfe60

    SHA512

    112cd6c88532833db8dd170d6b0be15faaa47783071192c7195eceb7a98596fd22f43688fa44cd11e1243ea79f6f0e9e87002425795927ec507c7b926388710f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1db6a93e1dee37761ab4c7b4ada64871

    SHA1

    974578ca558fe498a50623f0b3ffa3bc840b5343

    SHA256

    5b0e641423259c50ce95e478c1abfe122bb4d24943d6b831c668edf67af3021e

    SHA512

    03f9594234964fb7ec67b0a0618f55e5aea8caca924b33fc0fa7a34e39125d68049f5be33480388b69fb8aac25533aedc1b2bec77dea8436973b405f8f378111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8360ee28ee1eb33a4156ec2f0bfde93

    SHA1

    9d732ece3ca553cd5246e7e11d773b069224c644

    SHA256

    d2a0a7a79aa97a9fd992ffb911d5f5b9ebcdcddd2c537bc340502376187f9f0d

    SHA512

    4aa8ee483663da8a94c1f5e0ba5c97fc64068c28b67f62ed870a68d508dc0a417e558ebdfb7f7eafb77839b0c747fdc9b8e1d7db579357ac92dc74239f6e0d7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    933e7df63975282abae41e8d71c1cb99

    SHA1

    18403cbc2c6348622336fb2070cac3fbd16a0c7c

    SHA256

    63053acdf026cf5ea2d0f11ece226693406babb5d782f9c20279117142965fdc

    SHA512

    99202b72472179294e0199ebce799f6f5161e23eb68b1f2f5d934e106563ced1087736ede5ade7eeebd44ec131a1c2fab88e4e2b09e0e3d5e0ee4320e61667b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbd6d2c52020baf6d330a7f3ac11a6f0

    SHA1

    3cf7a5703eace3dba6a74cfc20f572eeca063e16

    SHA256

    b418183393085e6faf7a312e1a1ca577aef64c1fec36b8659ff6bd493d155ad4

    SHA512

    97993fa8942fe1d9632685e346d4aeaf596fab5541e43f8cd30862feff77b83e35e7f70b7f561e1c7f5d26028e58f5ef33493a88961d101434a1ee70143ce68f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d878421c53031b773cd181a919e57ba7

    SHA1

    01d6d99af8be5810e2b63bbc06976dbab0f50d73

    SHA256

    0ad260e6926f46de53ffebc8bfdbe1900b2dd53913725dc1b6950b7db8e143ab

    SHA512

    ffa3c5435dc0b05a5be03493bee28387c550a0cea41e714fdebbe52f036495b21ff290f2fdab0b4b00aac54117df7512506747409ec96c687479f8bd0696f850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f4b44e65e69d3c0f77bba4349d70f08

    SHA1

    e2ae394411c3c758975a032a607f44674c6f2e31

    SHA256

    52b51d5dc802b8048716cee7a617fff51c028dc884019bd4133c7d700e97a546

    SHA512

    a221b495e6ba771bd2dc5eefb67ab3695af0f7200d4bb935ba5725c39682adc354955859e987bcaf7f5d35d204feebe7da339eab22ffaa335ea2728982dc8878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9926ba2ad3fee0d8a75ce54bc1473da2

    SHA1

    dbfe88cd00d37a132775515ff0669ad51acefae7

    SHA256

    99dc24c854a18f5bba3e2190b90f449a69cd27d840362b8c8e3d49315c4c4cf1

    SHA512

    cf955795c2bc8e77e4626d3d0e8b989116992599b0678a5088d8531cb0270c4dfc5da2347682ccd9d79b9c2cb3b099ce8c7c2f7d7c6a5f55aae6b62c0693766d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    360d662453dd7b934ba29006119677f1

    SHA1

    d406fa72df4039347757a093b8d0a00b794ce2b3

    SHA256

    d06d49e94b8c26d6e1c3ebac050878eee86a8126e31cd35b08576e35e89cedc5

    SHA512

    5c220756f413b45025b112502efe19dbf8f8d05b506c4a92fda241d9a390f8ff0ca37a8ef49df907a42f3ed6a1759c0e059c18978fae40a5fdccf7b52410b7d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ea33af0f69d70442a7f14d3c97e9849

    SHA1

    258305ed63bb55ac9a4d74452bcef70df9e993a5

    SHA256

    a24872a80b05987a9533a9b0d943cbd62cb1a6df9153ed4566acd62021ea85f8

    SHA512

    6b351b3d5d8386e157d9c8ada1b02a9833af85a439d2baf54de6130f5bbc2396394c543a14bdb01e29a3d3128feb1bef8d03e48d39cf9720fc63a4a7d97052fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdf606e733583ad2aa1b1ab94dc3789d

    SHA1

    7251368deb2c4853cc50bf9938941622f66b3590

    SHA256

    1ddfe285987867ba962343ec62e2b16a3dc619613ee6931f2a3f4da0b0018f4d

    SHA512

    c6b979320d7001ab9003334565d721d11ab5a91938522078279c7bd60799558d005c78eb3a58db74a87cc1729d3a6e31024780e79bf4d9d81570085655284984

  • C:\Users\Admin\AppData\Local\Temp\CabE478.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE526.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b