Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 20:24

General

  • Target

    d2c454c3d657f23325f1cb94181d2ff2_JaffaCakes118.html

  • Size

    61KB

  • MD5

    d2c454c3d657f23325f1cb94181d2ff2

  • SHA1

    85050e77cb15f410eb7c3045e2e90a12f04b5ec8

  • SHA256

    ff303abc9db205690ee88277e6095970977c63840b7b4be6e20a4d059d60c6db

  • SHA512

    5da0835f2d9f5371fd2263d8d92a378bbaa42dd75bdab7b0f6825f01614b439ae35efd5810d69ae1157dbf37b8d2a6e42c223125999727826531fd247f2b5a65

  • SSDEEP

    1536:4VZGmHZL7mXm/bX1bs8igako1GbyJZHg964SSg1FoqbMN3OyIp85cmN4:QVZL7mX6bX1bs8igako1+yjSg1FoqbMg

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d2c454c3d657f23325f1cb94181d2ff2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    65a2b1b0cc04ea2b179e3db9632eca34

    SHA1

    807dfcb0fe241daf605a369b089e113a94b6bf5c

    SHA256

    bef03fbad9f35a37869b0a5b5c4e700f3a37123aea7a7bd15fe95071be568140

    SHA512

    bf4182b4b6d12a08de117a8f2c084bf338f1c91f419ced8356565389049d8c6575d29aefda6a9463ea853a1ba54ee075ddd13f5962b00ad534df3dc3e6888b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06f4e77e639d0ec95f6d992aaa0c86ee

    SHA1

    336bd7db9218c1f4499145d6f84a6b10661ccb8f

    SHA256

    4cbb20c5ae37abddf6e9fb51617966d305af975f6dc0c123e3c42cc0a427de2f

    SHA512

    845f17e64fcbfb1e12aa205bfaa6a52030d7dcc506004af99b69b3528c7b853b8b082669edd8ba292969eb86926f95b37e4feac13bb879dd5a1c5e5f3d01f70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edcaec242fcfa74838f427651676414c

    SHA1

    46c6deed09b3ade246f67941237a32fb6fda9efa

    SHA256

    6f6ba18733c292c8bbbc67c26f3bf58bf2f408c37bdda58e8fe3d287db0a9bf9

    SHA512

    bd7627d0bdde8df0187ddd53492d6444f8ab42a774d7f9ae1e107e1e5456834ffcd28c54f3304cfea2404614c6ebba1d45f222c0754382f3b57199606949b36e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c4778c5d0d3d33ffbf7d81754823f31

    SHA1

    aff1dec41d9203a3cb4f6d1afe41fb7b1fac1f8b

    SHA256

    fb30b965a9c7808fbdab737c98bbd72a5e155bc234bca24aec48f6e67f7b7690

    SHA512

    8074128bcb6defcd494bf00e35483e61d1462c5d4689e80f765872fc9d7bbc5fa499849434037a2f431246279d06df186b940ea2bfd8e4d3cb70aaa8a0842a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6a5b04533acfb2721bd50ba60f7c22f

    SHA1

    7ebc9bc698af8a200027cf4eb7bff2b114bc7ff8

    SHA256

    6bf2ce933e5b4cf1862c36286ba9451ef874f418fbc518c18bfe12d5faf79cc9

    SHA512

    4981c62cdbfd60e813617539bbfb0cb175bf27f1121daef769b83711128b3190d6fa0aca9e57c48c91cc7a83fe41b0275bddbfdf20410dc23e0e16942a99517c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f912bb2ed84d0cbdf1cc69c11b79fac1

    SHA1

    26a0c4f4091f83e485227d82fd24082e436602dd

    SHA256

    54c6c1f5f31c9d2c30d5f6543f3d5749a854a34a5186c0cad9d732dc2987a401

    SHA512

    bc9de04133bb6e383405b0b5a1476a48ad41e2d69fb2cd2d400d516bbc7558889e602209555e1ad573a0eae05fb4f5059ebe75d08dcdc325b8223022cd24032d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e37f8d080d289b24c3a01052e0b9723

    SHA1

    8328293b3f34eabdd83229d0e34265317fd40ed6

    SHA256

    23fe645e6aaca94ef4df12fe3e51d61ce3a689e2fb1348eda1e72d45fa52c482

    SHA512

    6894d85efb0d59f9aa4128142d15832581df450d42e76dc661f3d7cf0c779b5e914bbf0f8e910524f327e5851408ea94000f155408bbd2261d33da9cddcd711a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3f01ca39d1d71288cdc4988857458d9

    SHA1

    b4408af771e7f16a9b439234da3c2c1137990f18

    SHA256

    bd0b1bedc1a8dd513ce955157c8e9c631923a7f8415a940a718cd779e405c6a2

    SHA512

    3a376c5eb36fda3769d459734aa930d98e99b061f7baff5246a05c805d93fc3aaa00754eaac4195b64f90e54deb4c2c6335df75c1d6c4622ff421325a2947dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86edda40849b9d52b0cd19113e09e0e3

    SHA1

    3ddae87b10723c6d76282eaffbd5e1a1db7d8b7a

    SHA256

    0b4f21164169ec6ddf4fa61e7c34d6f7efddc1346a79d72e5e773e0c0d8254bf

    SHA512

    9deee5a3f519f35895abdc04d5cc25e63a79558c5525766b55bbd94f29c9287c171118c3514af9a4154320423bf58a9ab1119b814c105e9573fdb73ff1666fed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7939399507ce9c2a0c06dd1bb15e61d

    SHA1

    305b9a98870e67e4de13c914d3b7e0c7766bcdb0

    SHA256

    ec3be904301112fb07ce900625c6d672cffc7372e9a72a86aa325d3069f54c32

    SHA512

    66e33b48e28596f63af66e62986bb1b14e858431f89be2814606249bb06a82e138416cb983ebc13773d865641bb7af10a939ba8c9621de25d980b808e5771a8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c29c99262e3dfbcd98283152ade10e56

    SHA1

    fdc4967e44e7d23cdff0205106b3c68376bfcb89

    SHA256

    4b7f7ac2d35e4afef13296e379a0ce24e3adf2452334a4dc2fc00e0446d6be57

    SHA512

    83668d2801dba2621edad40d058438377e41c150e6a30b1dfb5cddc18a9f91b99f2a59c5ca6d71c20166e773fd5bfbeedb5c1e116e1cad8980b64ffeb79d431f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da0dd0284aceb928d3bcdbfeeaa28b0e

    SHA1

    2e3914c67af973625a682f7deca0da4deb526e09

    SHA256

    b2d0e9ed4d75b06bc5b53c30b068a514ade88fd398227513336f11db9433d4c4

    SHA512

    4eac6f8485a5396dce8ff23e334c2b067f3601a8fa25c5dfacd4345f657b380b796c242b7d05f67e8e0995f32c2e1edf9c89d48c1044328b7304d53eebdada6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d62873794bf7535560f5901d5d217646

    SHA1

    0a191eb07f06183f39cc6342ef2869b7ab0b473e

    SHA256

    3f2640fcb7c637b6b27cddf6fbe4cda788ce8e24a0a34160ac1ef792d6121b33

    SHA512

    da2f3f67b2613c357e0d9091f0e5f3c1032de36112388e632368a5c1f7744e0f216b135cf5eb7b6f770208cffefcce73dc978d05880a7ba45c9895370b4bc7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36790764c1e69992745754f059bb3ac2

    SHA1

    5cb9d64edf9f926223c84eeacdbb44ebc3ce3f5d

    SHA256

    0f268e6ba0f7fffd4faf68581d6e8ec53990e93952d160edb9ce34b81f6dbe9e

    SHA512

    64c6e7f45f9ffe68d2bb8d79566ba932e7459039d070af23c37ab85bb0d2ab0c4915bd0df3dc88a5ea5a0c91a1c1b19be9ca6891ba0a5e2a3fb8c917498d1964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    145f88819eb85996b01dc574af14f078

    SHA1

    8bbd38654db8d622502c357710154e3b8ef00ba4

    SHA256

    051ae716d80b62e58fc3dee169fe382796d105d8ae504e27a913d57b1f44b4e4

    SHA512

    3aff11ce78453a0025118114f1f19e22a2230a561d9d378c0f3564078afd3064de956e963acf0bb0535a6dba42c2048677dba7d2148034f1f96104be54d165d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29d4466aae307552a71abfc2442f21ee

    SHA1

    989e206da32cc3c7e84d3047660a97cbe14a29f7

    SHA256

    ebb7a8d96e675814737698b2eea75be6d950cf03445d704931fa0a31b48b0054

    SHA512

    e4b2fd7dcabc7ff1ef659e0ef78d1f355e9cad1734d6eefb78685607ca804991d65f70f83b15500f33b2ca313ffe5defc0daae4b918d1763c400bfc2a0248089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9c523224c85a2335b009c61c91a4cc7

    SHA1

    1b67404d3494acbd40758010ce8e72aba76ca9a9

    SHA256

    8ad468ebbf973c3baa15f2ceed523b6bc681123748c238b63d8bf1dd3d4d33dd

    SHA512

    de7ee0bc9f04fdafbfb2edfb597662fb20234de7280290477e79f5ae340a1ce5d06df1ee53476650a3866db1e07c4f152fe5c483ea3132254df5a2cc6b1cfe67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37564c4b5dac05eda36e9f9c3fb6b349

    SHA1

    b9eac586c6dc5b25bf8c44964a3ca6faded3795c

    SHA256

    43186d022e193e457eccc1ece4ee2ac1d5f5fe93cd4987eed4874d104cbeee7c

    SHA512

    98816ef0b19a38e996c17ed345e6c290df67d97753937c5cd462a85e432cd1fc25b348830ca480fe6f49de892a5eb8e3eddfeb2dc580e68729bc505a296ee9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cd6662774dbe6a200a8522051f6a48b

    SHA1

    b1b3b768a87c9a422d0eb4fe43e31b1d6073a666

    SHA256

    803bd0fbd6960a3ab2d0846fa234f93a0cd5c4a5ec6f4a0543cb818e6a0e34fd

    SHA512

    05b1dd38d53a672462bf68b048d032e98efc00fb05705f146513ae0cf4596f5f8efe41ca8571eb063400d2dc942e4a45e07d9816c5fd85c5bfa5e597cbc1ad98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7bf1a158de4ca0fbcf31579d5c0126ee

    SHA1

    95ef7a636e8bb83e51cec532d00e07d5c726c422

    SHA256

    670bcb2dcd0a08d5c6d5e81ac9137a787870a19057b4a6048003fefe33cd166d

    SHA512

    2e24edd6dfc82b551809d9385b86f4f66a0b50b2ffc82d5b4d84b5b529a5d0a80926fef6db2eb8d622439e6ac1aa4922c1d767850387b89fc057d085375297f4

  • C:\Users\Admin\AppData\Local\Temp\Cab27FC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar280E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b