Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 09:26

General

  • Target

    cf3801bb184aa39f4224154501d7abad_JaffaCakes118.html

  • Size

    16KB

  • MD5

    cf3801bb184aa39f4224154501d7abad

  • SHA1

    f6488eab7637f474e09fd0610b21356e918cecab

  • SHA256

    6d265d214f2b534c571b4a02dd2a5dc94ebeb35cbc88e42bec830f0075f7d22e

  • SHA512

    830b8d337efa01f9d1a776104b8f3d82d1d9d6293a139cb2c0403b1eb52a2c0b813e900328b6c5cd8db958e2fb93950399bea6bfd318928c55261348701e5bff

  • SSDEEP

    384:4f2f/knzJ14ZHl+mOR8k0Nicv2eQEGRTg7O97AeBV:4f2fslZF6nQNky9rBV

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf3801bb184aa39f4224154501d7abad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2592
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2592 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6358291a40a9494beb15eb4ad576ddec

    SHA1

    836dd9a77a04373616124b1f25e951581c947961

    SHA256

    5c25c722c4523d82d095e9af053fc65a5a233d2c98bcc536915bb1fea011fe00

    SHA512

    430147cba5d4d2b78b8884391f79bd30079f737f60da926a3ebba55800a213ad71a110c68424a0793a4aa35da110b84547c476ec96b7cb6a8aeb3b624679b59a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad4d04b04c08955da8f8e6993a334cce

    SHA1

    efc12e9bea392a421d3b752573016af7811d1ccf

    SHA256

    e7aad0caa55ce06b2f5ad34208cc048f96df2039fb62936ba5ed83062988bf83

    SHA512

    bc33b2e60f4015f76bf3e15c5506c86eeaa72bdb28518ab1206773934b87e625b5ebb60dc84de1734f0e929574b31715380cd9a8017b9809f51488dcb4fc5ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ef96d2778736903223f57294f821e4e

    SHA1

    7777cfecb0da6683dac1b074390f1a6b557baca4

    SHA256

    17ce800b701f45177c1fda115aef0460fd61b5a786e1ca4d8777ad0d2151b61f

    SHA512

    2b233065986c4f8744d78b59278c137c059ef1670e2718e3ba4511a4cbad23b0006bf95c30ae733d7726a644915940cde8c3b2d0d72880f1427a4f1b2a3bb3d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea6231ad4a952358feb2d79f27110056

    SHA1

    b1fcee4eb40ac886fd76c10e45cb453fc56e8eb1

    SHA256

    d2bf48512ba29f08e0a160f02249c6b9270a32f7c846795352e2d7720580f570

    SHA512

    0f39bdb474d77eb3449ec28a6dbf70ba636add18bd23130fc356847a33f1aeddb5f9a7671b80581807a13b3fc46836dcac87c6dac18480e996b82c3b872ddce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f97e1ace5d0508b12798b1188b96bf3

    SHA1

    846f2feada72a79d2266843f55ca13cfbd6b1a2b

    SHA256

    6b4f775f0b592600ef780c7f560efe10c9b6d018bb2809cb05d10ebc24d026d7

    SHA512

    dadad4efc4286d16118a547ee5c07692259b99541a0a9dd153c46cbba1add0b51ccb7c32590aad09b07d40f2cade21915aadc9184b654f434ae847cb9f68f0da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17352868c4031684d0503fabc6ef80e

    SHA1

    ead58eb6a4063d1495cb38faf03f04196b089c16

    SHA256

    e64c7acc4399472c868b7134631205db0afae52c39076a1b975e48fa0439973f

    SHA512

    c053b60f204b97df7209e7fe234b30b7e3f7fa672fa11a015bed8e150cf2a27c36b090d8910fea3adf66fce47ecc72185e1bfd20abf99a6831fca1a82afe0e79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1469e55490155bb595ad8b1a10088218

    SHA1

    e1b590e33f6f61e0493afef55f06b67fa7b240c1

    SHA256

    9aa7d5fbf784ba78016622331bcfed96fc8a72171d5a9677063b6495b405254a

    SHA512

    9d6053061ca91072640a64b7e0314233eb27055fdc3081fdd3512ebbc350157803a82433f77a579172fa530e92e236575982e2996d8f8be8dbbd0e068f1fd6e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f2bae4a6b727a93b0733ea5c480e3a8

    SHA1

    0ee9ffed5d2da69654cbfa79917b564efbb31448

    SHA256

    675d8450cca0676efa8c9b282ef36a4d3b5b018e737fc2f079078c05704db6f0

    SHA512

    f0abf1b58092b473eac2844de73f40366294d4b3986b2181fe12557c94166efaceef3f7a8c2ef20c2d8a5581492f325710121451c9232308f2b127bfbb7d2226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3861b058f5c0885b37d5a6de04cb3e5

    SHA1

    6622737e105167426ba9978be7734c02acb2308e

    SHA256

    91ac928237053ec4588d0f69b502b9fdbde9246f05a018430c3d20d7576e3ffe

    SHA512

    c4363247c56d77fd7d448f07dd393e9a2104f23508f535796d588ce25205b97ef542fcd7780749d58c3c74c2c5dc15308c0c8456a8d607a7879c01692a060c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f093e99bf93d17344cb95586c77cfe7

    SHA1

    8910feb2744b8694372c141b9c51d5d1aac6dd51

    SHA256

    39d91264513b060dd5f36df6f33c9dd14887682a715cc8910988cccbcaf5bc02

    SHA512

    2b77c87843a1ba8b67e0e6d3a1dd64f3ec351f8701156256e4e477beb9c69858e402f5d81678d58a09a6994f0229437d92dcd3d3d3677c6958912c5836b0857b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab6aa76ac7774c95985abedfe6782a91

    SHA1

    bd61f8eabd6359b61cbf24bd2d96fe091e3ac662

    SHA256

    103b10373811ab215e6eecd13cc06625da664db669bb3bb3e95bb0318ff43e58

    SHA512

    5301c224e7431f80637cb012b5ae02256a7038e03f68c38f53836e28e46862c8adb7bd69621722591dff64be2135cc618a8059cdc9426db182a785365b674fd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e29512212030d65b9a1dd0be4fe4f7dc

    SHA1

    3611d49307fd99b190106fc272e6b57da794304b

    SHA256

    088bcd8c00bb740184042e27ba73f83320484bd8eb91dc06a3a73c9e524eca2f

    SHA512

    67f73f20622aa7fd11efeadbaff1b0196283712d6d0a14971f365697d309c183b0b02c0b774eb4c4e13070658eaf2139aab8e053e765833e32c1d66a39ea4b46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58fbe82c808afb83c0d37fee239c8d85

    SHA1

    eea350c8f940dc050fecea075418093709b87853

    SHA256

    fa1567056f32ac30163538767d5d8ea52306d7cc7323ede5472f4972651a4edb

    SHA512

    6ca39f82cebf362fdf15036d75f96155e83f794388be25648ca325dc61e45f0c7049180d3200e200ef4efd5ef250318666a002c09998e6e2f46fd4e36b7f3640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d05b6739c1b29537f0c6b28ade753a8f

    SHA1

    84298700fc3abc1f57e3dc8aada116f82ab5b5c6

    SHA256

    73361b719fda42e7d1266607c4a4b3b21f480d293c62f2452cd25803ee3efc92

    SHA512

    4a6d2e74f85a42cb6e7375f7ac49bcc758b91f4982f436053ec3d9a5269c0fff09168facffe99ecc6834d47ebfc37307a279981a108b5968c62ac519d6f93f4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56728128ce720f877a9d3526264ee1e3

    SHA1

    402d3bc171b188722cc11c502a22612594eb3bba

    SHA256

    cfb4a613a315600803bb3ef4a255d559c154fca59d97aa116a91a67bbe7d24a7

    SHA512

    01fd2940503e5d646654117484522f906f6fd55de33b168efb657bd449d888c66e16439142486f32ef9c213ba7f0b6b512b06e27c17ec4dc96177433f682287a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acc803b01b909d25191db36759a603da

    SHA1

    59a5c4a73df60d1abb18ba2ac19e59da154df103

    SHA256

    1faaa9bd58a7e68e5b213162dc2aa88f17a7c346924fd4afd2104ce163a98cfc

    SHA512

    06f5aa810736d76ab7704321f54409fe146479299aca4e07f528663ec0ab83ace65cdcaa18f152167d600044cde22705d075ac153037ad45043d3ded166ad8df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    151da56c3e622a7258463222dca46a45

    SHA1

    0199d9644f96b4f9e2628a960e5c864383f8b4b2

    SHA256

    043c6d46216c3fbbf2efbe6c5103fd31c07b8b9e9fb1702c5242d4a69910f808

    SHA512

    46372ebc613db52562ad187bb25ff69e36abc40be567aa57c0b36f1d655dc24a11c7e44e1112bbdd8f5f0ed29ad2fd59f2318f214f0805c1072878dcb3fdb46c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16c8a7e1c129046168d62ce98f31d8e3

    SHA1

    5475f190987716fbace11862326d9d7c9646321b

    SHA256

    5b4486ecbe3e9bd9ed4b9abb98fff2f162a1b8c13ba1519add525bf62e8c574f

    SHA512

    e93ab4ddac2b8f4699e826004c4eb5c29c4ffd7c9617287b6333ce14f84360d98b2c0fafae62a564675ee77d5260062784a93485cc0596b0e63dd0f0fca9f443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff8a695f85f4b499e33872e52f057c5d

    SHA1

    e9fab7f09ba3d89017c0703b7b5e817467961ebf

    SHA256

    70210777fd319760c8db5764c2ecde536d478ba115461f95f18bf047ab4726ec

    SHA512

    54fe5a65eb106b6da8edc0de65a4b6095c949e7f45bfaefa2cd18100c6eb1063deacf0c99c6ed3b0402792efe9115de6815e875f32a3324a511a9cb3777cd57b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    01db410d57d5ad3e7252fa60a1675b0f

    SHA1

    705889b1f310ecdf333894b3688995ae32c85003

    SHA256

    5c734d02de406d31f850ca86f2d668808b453fdbf7c53ad1a01fa0f7a05bfd02

    SHA512

    918c5108da2f2f79c105088755df15a6580a464a26aa8ca67d6fd3412273d9522dcda788dd622b56df6c6dbeb1762f5b5378f81de48b5ed5510c44b4e874d8d1

  • C:\Users\Admin\AppData\Local\Temp\CabAA92.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAAA5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b