Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 06:20

General

  • Target

    cedef84eb818d8a015351b9cadc14786_JaffaCakes118.html

  • Size

    33KB

  • MD5

    cedef84eb818d8a015351b9cadc14786

  • SHA1

    903bd83dbdfac14f764db387518d9aa4561649b1

  • SHA256

    12775c4f67a2d8c54f2d551d4f494a61a2bb84bc4d2b649dc22599c57d1f2c66

  • SHA512

    1c98292039af1d77114ce152597ff3a9239bf32428b51f7a1a3b2bbaf2a3e4aeb619b5111f624c28dce141345ed359e67e24507b52bf7e4696ebbf74650a889a

  • SSDEEP

    768:9fysH23jWoajexePm5kYTEMDuQbgMCZ2Zd:9qsHaWDexePQkYTPgMCq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cedef84eb818d8a015351b9cadc14786_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1800
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1800 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    64e47e4bf56f64e00c539279327f67f8

    SHA1

    01d2db066993d900c688ffc73ecb87e3827b3c8b

    SHA256

    df1cfa6466e3b5fb3a335bc4b6af8ad7c131b2b3896fc1ee02f291670463b66d

    SHA512

    17a9a9baae4b2d19afca161dc067c47196e562ef58e3ede8d0c39868d1fe5636e1db57a37c761fa25f7a56a14a893feb71ebeef3abb1939e337ce70e1d920803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_89AD95FA8EF8AB8DDCCB2E7068099B52

    Filesize

    471B

    MD5

    3d1a112b2e345d67e1be3fe552185b9c

    SHA1

    519f94cff1638779d88aa799f3b2e3735183f5f6

    SHA256

    4e66d99574e3d3510acf218e78daad470e042f92f9360c32b0065c4afa37c67c

    SHA512

    d6022cf0a0fafc04db4985685039883d4c8509b1d9eff692f57aa25f3cd34e72921895a798f4fe5944d0f58285cfad9a1fa54d6a1f27458b9661c2d2e02da125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    6a34b9057f8f831edbc42ce0bb38b494

    SHA1

    a62f942b451a31bd1ef42d818a382d517fc8dcd6

    SHA256

    a0631956de58918741af439ad789b4acb99699b2eec0c2c0237a60d6d940ebb5

    SHA512

    a1f1208ad5eda09d1d54bec273eae7f4f4fcc6625365ea020bb13cb272cac913dde5d4bd34a857b98118131cec2ac415f72b6ab01ea0fd8c0ad177fefdb25f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    25270895ca4ef061ed1212225ac02670

    SHA1

    49a283cece66fef330560a90137e1a4962a1081e

    SHA256

    90e7e8a40aa1f6e53586c777853490495c8e61d6efe40b6f24ae5f96a4e2609a

    SHA512

    44213a322acc0c02fb2baad067a29a52d104da094c049c47235a1b1b3b8ea02ab69358e9ca66ca06e29a58e270bc0ef1c8c069c82850d10a5ad394a7de55eb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7b87a4016fab860a91c5592abe2e9f0

    SHA1

    f66c76b816b185d56df6eec774d309e7c71c8a40

    SHA256

    12c382537a4592769b87545fcbc549fb7a026659170616e7c415a549f1f5b972

    SHA512

    09a442d5366ad08f3d33f930337eba59a549eb5b8d30011a0c602bf332be211ca045388ff49cd2a9f070e4feaeba7136dfcea7266e09feaa4ed1aa9e506780b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3afddffcc2a70cc677822aa16b5174ad

    SHA1

    e9cc5abec86fcc197796a790f73ebc9b5e50c259

    SHA256

    db54020f4735a1801c2a966bb75761100c3a847cb65e4b23bdcd21c0006101c3

    SHA512

    1769343c8e367379c0b33e2283dd4a5e2bffbea8b00a97add7f3fe05e124ecd53139d3f97a0d302d7329d06f31e1a59752d78bad51b298163eaa80d2152eb7a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbf5b534aaed04897a88ac132dab87cd

    SHA1

    78e91b6befb8d11e5f8c765507dec938cb24ae61

    SHA256

    1e90f7338e0fdbd47474bb271d3f401d807e2d0614ded72bd551601c94f02945

    SHA512

    bca23e2c4baf8611c7a25c4ec57875430470171e2e09c86308b904c8671ec0f3596e48c8288fc807cf2a3cff72ce1b09b6f5b9862f1d7d88e6ad73409a4c9c6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    328dfbcb90e5543252b50d1a01bac214

    SHA1

    bef4c965bf0a09b46a266365b539219abd93acca

    SHA256

    dd74405e928e4a4bcb0d9b6f4056dcbcc7b6104096daf8ca6d5bfe4abf599aa9

    SHA512

    39ed39d5e32d909ec46f401e208b5b257920ace4a1b81d028fbdb3c31df4994b8a468fea01d991535d9f14e09e0f8f24b9a1b4e6324e8a18e89fff76b8ac484b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d8011460339897ae0ddfed858684166

    SHA1

    fc5361470b2df29b27c730668d27a4472fea02f7

    SHA256

    2e3b891f930fcf5cc7f3faeb1ab9e7debeb8b039a524085d1a0823da98455c4e

    SHA512

    3baaf8d875e3b44cb19d8c4d16235b670ce10dc11b0e5a6caea7f54bf2f90ac48be759f1a651ddac220cb1fc54371487f5011992cf812c915f955c17c3c81669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87821972689d48991c84dbba0def20d6

    SHA1

    3e6d6e24172e9b909b04cbfc484700fb54221b35

    SHA256

    2791c6a8770cbaeab283e60a0b1e0e73b27a026417a83c2cb44ddb2f5a9354e1

    SHA512

    7b14c695c5d436da6244166bfdb7caa1085c48a6450d95450c5f7f7ef356c7853ea09ec869547585a0ff009ae37f16edee61ac7d93ed3f3d6f22227d661ca65a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62872b1c8b55f7d96eb349b764024484

    SHA1

    121f187fc85b6d4108ee55b307a07ae6daaf039b

    SHA256

    72495a0cd9eef390e701a05d39cb42a76557c525f7f6d80f8fb045bbfee6aa57

    SHA512

    2b5b0152a53fdb4eaf6393625459e466c6613d70ec8730e4d012595c8afa78ad2aa63caf6d83c3bf268721d1fb3e553cdda6af1ffc740c73ea533c5f0c6221cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6b87e74f6d17832b92ccb39a0c3695

    SHA1

    786dec00e9012447c7791344da138aca0c3f2aa0

    SHA256

    773f808e39989d7d33851b75e4e931e36176489a0c0aa0ca96360ba85475fccc

    SHA512

    8cf2aed519990f507e83bc93d34634333a51f8bc1cda86101cbb2b94a898100f14308f99db9ee69ee49df32dffd10e87c6a0d5753c4e3ff7f889990130ea2d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b920486e070a31c457ce5414bb39736

    SHA1

    745b95719c877439e4955a3eda7320db3a248add

    SHA256

    229126cab70175c756727575c1dcd56da8a8c987931ccee63392c9042595eb71

    SHA512

    2a6359a538bcc1a5aa43fdf5e76d1858444f483b8cc34aa1c24ee5c5ad8ddd67478c526a7267d3427c92a9a57e58d1ac94471cb7ea6b927998fc35e27b0acc58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47b4493bc6945b4873a622253f4e7512

    SHA1

    8ef603a5756667e21c0d7ef762383fff49dcd316

    SHA256

    63d9f97878f9ed47cbfa0de4b5fafbe3e68ee59aed912a1afe60cf9806217a66

    SHA512

    6866f37a34f179a51c3063010679fef9a3436746787e1b90f6cb605233e804759cf177af4335271914331183dc69fffa1be3272f580e780fb6f521e5da4b9bee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3b9eaf1186479fe6084ea8f19ebbf8f

    SHA1

    1da1bf57e664e82da2c9a74de9178dee0a6d9ae0

    SHA256

    016d858d23748f7afb484723b1bb490f610acd19d3eb1ad2cbedac2e0febc86c

    SHA512

    7988ccd0bba769883a058852fc2328f3c4262da368e1811c643e82cec4a22cc6a0c2974fee0396cf7a347c64db6b33837dd09ce1b3a15b1477151ffb1376051f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19063462955681b9a9dfdb7d5abde0a4

    SHA1

    4acd360da6ee7f6f405679d5cab464568707b0c3

    SHA256

    e636b01618548ad5df532b6ad7ef7351a31debb0d7adbf81dbc874d694fb0b52

    SHA512

    bb74ed52589247bad94c05ffe7dd0f56ba9fb141bf163f64fdab456df604717159f737566d0447bb46f67c692a4faf2418cf0e2894e0a2a1e68f022ad51d84e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9749b13f5048b52c8d24d758a89c8e6c

    SHA1

    c1bd2365d84f473f59a8dbdabc3c78a818b5ab3d

    SHA256

    9498541cee0c2b7673b0d8a326963583b3707f258fb5a9ad442aac048382fcb5

    SHA512

    60bb88b5ae17e5423f10b58caedaee010c778d5cf58c71bee15e063f439fc494a4d350cdd2be38d70845c18bc718e56a3e7a9e445206561fa9d90b3f81cac19b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e60242ea0c1bdd58b1de031c03b0a4a9

    SHA1

    11959159de1bf8db999a5177de082c3ac236ed67

    SHA256

    d68a58a60318eb9348201af5feed7139193a56982c74073e1245ddee85a38896

    SHA512

    30473c82143d97374cabc8c33f616b9738738f7a0f00b55cc6c8452fa2d51cc40032009a2d7f16957e17e558ef36d1a783b94c6401764afdc557c98f7e7342d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62835e1e597c8e49722b6327989cefd4

    SHA1

    c561c8d66de11b3df3a040f88ddf302deb226ac0

    SHA256

    eb46ffd00ba309bc55dc9e0492a59cd289572f9e3d8b3addc10a410cb103eb6d

    SHA512

    5cf763eb69ab3034435d44e81a1d805f661bd00bac42354b26a3c20a0da8687c9e06a23aa7a0c4b3cbb54bb4f1ad5a695e592a5312f12d9d69d1193b8dea1913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ddb6b0b87fa1a37c8c5527de4161de8

    SHA1

    6082cab3d20b723f0f123428ae8d561af3259716

    SHA256

    d18f5d6e15d0e0cbdf1c39d3e3e0e3ca5b776e09761b52a5f8f4dd5aa7564f8a

    SHA512

    81514095a7d4155931f23e4a31122c85936dddcb2dc3a990ffe82677974aace700dcf2007d97a73d6d05f4661a4041ef9f16ceaa2747691fa06fcbce837d7caa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    501c0d3ae6aee6267fa0e98cf52256ce

    SHA1

    9bd73b6e0b84fe51955165fbf9484e28defb96cc

    SHA256

    603d5c72bdf12a0951497d680ba14becab5dd9a63818bdd86248c0ada88143d4

    SHA512

    e2d84541acd107655e9c860136bffc58e5f9ff5255b5993637e9016adb15830b75325424fd8a1d12f5a61e67fe4748b230042660d1407a316bc4613ce55a625c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa1469f06c261eddffab3ee8c8820ad6

    SHA1

    bbe9a6cfb1dafdd0a3007b304e1ad505d7b34a5f

    SHA256

    d7ab5c9b64418803390733d1049a6288c8ded3e1a98aebb0779a4632dfd251ea

    SHA512

    5cebdfe1d80896a077adecbbdfe9b6532635075f406d53416ae68e32c6a8bc4edf4b846db33f6aea22f632fbe5b291ad083b9062baf9af5e49352d2443fc0ead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7aa01dfb29dccd101f3a765b19e95bb

    SHA1

    9b212c330529606afb87824860d4c786b902e57d

    SHA256

    c667d9dee24831886f55b40cbfd9a86c5cecb1ba096e5bc8cbd49e910100228e

    SHA512

    1054c3736b243069005aaf66331e3c2cc2c97c0cefc4852a665911c8aa4f3983a28e4ccb94f3af7a449f30a6f9f94a4419e985288832d4bcd16899dc709097ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1805b223bfbafc28840b6cc05c97924

    SHA1

    e0b32759821cb7606b4d92b2798be256a6e50d7b

    SHA256

    e991705eeb24df1cea57c1efd44899869e65cfa21f53658b680b983f96d16cc5

    SHA512

    bb7ac1505cd31d4b5164cf8960006a20b00a4b43bee774a819d193968ea6dfe5af88779c8f18ae2759619ecf3e255c88f3c1031cfa01c0d2f53eddd5c64c088e

  • C:\Users\Admin\AppData\Local\Temp\CabD461.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD510.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b