Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 04:42

General

  • Target

    d11a0ecdb3d408ad4e22a42f87564074_JaffaCakes118.html

  • Size

    3KB

  • MD5

    d11a0ecdb3d408ad4e22a42f87564074

  • SHA1

    a66279ec4120b5ec334ba16d69a1e20f4265c310

  • SHA256

    75e3e85bfaefe2af768dc5d7867730abf1eb177c72ac8759b7d3f66ab674cec1

  • SHA512

    151b41a25970f00a5d27564d199db69038a0d93b362f7f72b31652bb30699ab92b2182515015178c4a94571f7b1f9ac1cb733432d1b1b816a37b11c38dba9c56

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d11a0ecdb3d408ad4e22a42f87564074_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7695f39aabf6999dcf4520de0ace9748

    SHA1

    a1949a9e9dc2bcfbf09067e86e0a3abf8b609483

    SHA256

    1291bde09d4c30fc9bf4d3acc94ed98b61e9455271a46158ed1dd66ddfb67c09

    SHA512

    4842fbbdf3d7a67ab64a370ac6bf875436fd3514a1f6f92b940471ea700afea7e8d0d5b67f5253c1910238371d315ee1bdfb2ff3d889b47cfda372d03ad22b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0686208863a65447244d12dddbde0a52

    SHA1

    efe7d3ed726980c090382412cb6c6fae067333ae

    SHA256

    18c0b8e01816b6cc3d0a08d87ae347c6327c77066fe22e2de48ab69ec980cf4a

    SHA512

    bddfc9d5abb461dcd65516e4afaf733ae1c776619b275f70bcb3abcd4799d2cc01ccf9e9e540dcff96c3a8afb7655ebff413fbfbc4ebb0638b4bdee88d525542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a32327135505dff66305865dc4bb6131

    SHA1

    18cbbf54bdedd2c3736b051870d3ec6113bfdcf1

    SHA256

    3a8bc1ba81e3ea9b4b555807a49137fa40241289dcafcf8a44e30921fa3cd86e

    SHA512

    5a5e888a14e5e1e75926f78994ed2f8e2d20f8a29b61fc89f8fbc11e622357f322e45c01221c53cd54671bdc82310ae777deb0be65c8fda28c33dcc0b3dd8de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e18c9a248d07bb28e1a202b2017da9f8

    SHA1

    b5e5415ada3544161b866c4c9cbc7784cbac58a2

    SHA256

    f84280903f1d47ea6df96cc60754006baee3440efceac6a4949da1307f2483b3

    SHA512

    fddd76b072318335f624e262cc8eb147f6a9cec009ca2ec5898573f63ec0ea1462d90fccc163f37e3bd8fe3dda1098ee9b93262fa0ad2b51a54b3c6334998e5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c52feec9d5302b772578ab95a6d6597

    SHA1

    4e907c767cb3ceac651141bacb0e6de95e848422

    SHA256

    53b31788ff266d208d815317e56d5b44c61743530f97f62e0e4690e749312efe

    SHA512

    0348ba5142af8a3ab3314693fb084ee1bdb08f8533b09ddeb084681b9cfe70db18edcff3a6e0b67657047781d084af2ed414c24b634c792aaa6524a4821068cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b45dc9bff6e0048225441cbca0b33a9

    SHA1

    9caefc761280cbaeec0b0e5fea611a34edc44b86

    SHA256

    2a48082339caf8bf72be98acfcc933ea597be44060fb40ce1003c39e8713f4cb

    SHA512

    9a8ae44e1f53ace01d114e9dc12d0127e91f157c8de799f549d7c152431f64fde0c88fd7efbc4a1273ebfba9a336fd44db9248280e1e94b67afceee2ed42a001

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20a45f5165e1b9aa173f8769edc386df

    SHA1

    fc0859a3c5096d9f76b08895e3e149e0c33211b1

    SHA256

    90b0ef006349613fa362ee668e8c936e3cfcb0f250a17d47fc4302a6fff740af

    SHA512

    bad9046fef0872f703db2509a9d4e1f267b2d57f281ed11efb62400ae6403cdfaec2325235d7f37a40a0b7e88c5dda3256055b44358e2d7557a25f1db8dcf08d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b82434a57e81141ff102ae768ff117d

    SHA1

    db70e6f2caeee1e6af1681a1a7ae3eee50473aca

    SHA256

    ffa8655874d380cce64f19d749a95566c81567bd93b75bc9b602c4fe32cc11c8

    SHA512

    e0de93c63e8dd2a887eff2e94c603aab754173cfb7b46bb9d01626b040cac5bf385ff61f92b3c1acb90ca75ee92e05e6993e9ba6a35f58aa54d237dd8ad9b4ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4792e74c4f7590d840d8f11c9beb856a

    SHA1

    82c301b1bd73655a27c71c635e49cdc9875470a5

    SHA256

    6caea321abbf6dd59c30698e9c7fbb0952254a22162d38d0e369232470eabea7

    SHA512

    29f923ba77a0b816a38c1249765b072179ebeed7a66e3283c89dcc19bf153599630fc5b35988c0aef517c36bbda1232b41cc578f67ab436d1f3906fa8e521ef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87cd5203bebe672a599997b845909b65

    SHA1

    1504ba83bbd12ec639a502b5eeeefc06adc78628

    SHA256

    4469fc2f8a6173e181c9da191f16efa24723806b8071caf471063e924bd45afd

    SHA512

    cb79343fb20b3440356dcdac3177272f3d75946ca628a30276059f6ea4407872a34ba0c73b6749c54f74a18a041641dec8ba7d2c4c300487cd4b61e15c31a403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8715076ff151d136cc4bfc4647f68cac

    SHA1

    cc4d2e74c31192b5f2800177a8d6cad15530efd4

    SHA256

    33fb57cff494de17ff12fd429f2bfd50face0a04eef2e49de2671c77cbea733e

    SHA512

    6a5601661095b42976c7eb20a00043e3e216e05b8f954da22ae886cf8ca30398fa53baacb85f17d419753118a02b3f2f4a4451ad094e06405d7c28951515a5ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2386efc9143cde9529760321f94c141

    SHA1

    8455dc8e145c1f82bda4e25f5cd1b74369547c89

    SHA256

    79337b46ee3c683fcb7a28cf6927710e64d66e80c01711baa69fedb38715140d

    SHA512

    4da2162590a2fc9a6bf3ea99106412255e66bde096268b231aff4053778f7447c0618e15660516b4245fba3c759aa6ec9015fa0320eb77dd1062c639c3f06358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e72cffd383eed34ae827ae1d157a7395

    SHA1

    fbd1cd41352bbe87ee7251a06cff7cbc0276d557

    SHA256

    43d5fe74f2ca0bd3c9ad03565f7e0661039f044c5f1cedb4a4b0c7dbee806b0f

    SHA512

    c4fa21a2643856f7756d62b6238b66c31e806d2028f6ec26b9da248075741c03c383a8b786d9cc5f7a27838725d12d9022ff9471d9cc106aa3af243c5b58dccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7290df9a60ba137073f4178dc01ff97e

    SHA1

    d6d86edf2a80784def11e80106fe752583bbec4a

    SHA256

    735e9ed4c6e3f1d1f57e81a5cb2458abe321cc4b66bfd910368a2b7ea3491ea5

    SHA512

    29f1cb172749404e41e96dcc014b2420ca18b561414538130b1bd55fe3f06e2b0a47f711bdeee8f15ad4f7618f8dac3109454a3057d57fe37ce9ea0dcdfcdffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d1627fd3fb411efc57ee5c5e3cb4c22

    SHA1

    c21e0bdd32946cdaacccdaf162d4db40d87eb144

    SHA256

    a6d7ad1dd649f175cc28fbbcae9b5db9d38393208f8c50a34aabb8e7e1817caf

    SHA512

    03e1a4d9a28feb27fed93af78b56eacb337caa8fb5cb63cbd34a29b39538e3609042abbcef09070a4f99717af4ac292783239c8d29a3e67ab6b63e56744218c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f03bd97e4865238eb62b2a17b5af6c0

    SHA1

    f1d5a29e72a960aceb914087a1f81bcd8b491660

    SHA256

    402d7bb667b87be8d596368e92237effc07727cf572f761b84a81dafd8cfcab0

    SHA512

    b94317c9a2ad36dc75f9afedacb8cdf77f509d6aedee6d7efdc0f71998ed89000330ab0bfab07a21750fb3186d96d203fe2668b1f55be1035d5b6cbf223df879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    148974954311e4c66e42bd9c86115895

    SHA1

    b0466a46cd78bcbb4aba30340e72d0c831501030

    SHA256

    a6d8573fd9c312f620b81396d9241962a506d7178179a35d0de5d86e61e0600b

    SHA512

    4630f9cdc1894af18b5cb41900a3b59e98a95a366cd543915e9c6395c73635ee31fa0a0b52a3b70578c9d3b0e2d1f95b0b537b96c59feac22673c9d02acffe4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab90b60645b9e36bce6e0f26cc07630d

    SHA1

    c345bcd2ee4d2bd84184c88bfdb5e906346bb9a7

    SHA256

    675f45dab63342110e7759e2676a2b0a11027096e7677e568729f7843eff6e94

    SHA512

    c0a76126c04763ca17ceede50a21917944c41fe8746a48dbcd069cd1cf541f4f7c92bda2de88b541e1fcea310f56d505354f8c940c73020d1e6cca99ce3518ed

  • C:\Users\Admin\AppData\Local\Temp\Cab8BBF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8C7D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b