Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 01:39

General

  • Target

    d340d2333cc2b773e9035b9a04e894bd_JaffaCakes118.html

  • Size

    28KB

  • MD5

    d340d2333cc2b773e9035b9a04e894bd

  • SHA1

    ba4aaba52ee49c8a4dc9c912e66785fe2019aa04

  • SHA256

    060b4f2ab701612e0ed0c0d346ea3bcb46fdd7810693930c72160fffbbcc602e

  • SHA512

    313fe67222049face016233e9c5c8cbfb56c58f3780f7df2e62d2326086433db30d40e55c3fbcecb41ccaaf3cb7c5e62e028da841afea145ac1ba8fd70e74637

  • SSDEEP

    768:BhppSSNzE+PioioZj3GZdXGKPP5CECl8uxUv55nc8zreGk7AscoCAo:BhppSuz3PioioZj3GZdXGKn57ClXxUvB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d340d2333cc2b773e9035b9a04e894bd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c7d3aaca5229ee77d0d03166b391613

    SHA1

    116f397bb159d10bc39bbe9a6b0480230aa3fe3c

    SHA256

    49c933c9b41f1d338892b2b5ea019066cb6779fdce526e90fb4270f034698634

    SHA512

    92dc02a85b07b4bfb1dd9c86b552517f65dcd675a09c530f6dfdf1d798a308e4cf33c58c64304294d94f29bfdc75a536164bd5d12b8041fd6c837c14ddf3e87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a39d344cc4d64cdbf33b07f624ea72ae

    SHA1

    cf1547853a086dab186f0afb503a66c2ca36bf11

    SHA256

    8ab1abdf3045fa28e50aef116864ea991a52e6ebbe8ef78325d2066bde5b89cc

    SHA512

    f664239676fdd51137189d47c8a9f39951d900af885b3e814e9769513e012164fa7993c688b3518c8cc72704edefa59e4be94f2e659ef3e163a9b80d263ccb09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d525a5376cb1757174357a15178fa73e

    SHA1

    eac8328b52a94dd31947f1c4d4d38028c1253843

    SHA256

    d1aeed56726c4833db2bbd5e0becbc4367be5287bb48a7dc2f7b50a2ada227d9

    SHA512

    4f0a5375238074581f1949f71d366e315e0f837aefae39f04faa35496908ee8f210d5a36580d6c089b2f09bb4ffed2277851a2eab4a28e9c2bfe3a955deee681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    289b23551ee7c682de166300fe5c1e92

    SHA1

    9693c6188d100e14a8d8991c0cb3f97413c3344a

    SHA256

    82395b64fd2c760eb222385f8e02329c12770b40b1c5fecbf63f8faaa64f66ea

    SHA512

    9c07b8aa759ac10964d7ef622dad260f62e4dfe0eca61c16ec1f5b839b1bfe43c789d3c4e4af71c1b77267a04e6096994c177af2d44e396f9815277a87541ef9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d06a00c3fb87c564beded97c2d939075

    SHA1

    7a5be056bab8107170c764ab1c611b3df178feff

    SHA256

    56770034770227d69c0ec0ef1f5cd0f1f5d0a691ed4711206b56fcf787fc57de

    SHA512

    68993513c693ed4a213492fc63a9bf13e6348af633fe555b1f8ad53e7ed2da11b2a9e4328bbf7eec5f1a4c2a1c88d7e060e124f03ee8c01f71af98ff27d79ccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    463825cc022db78522260f98e3103f48

    SHA1

    50f8d1bd7606f4c6515f5c2b4da46f10fce9939b

    SHA256

    022ca40d64db69fd7b7fcd8e61c3ee53c71b639ebb1fff00d1a404496b305160

    SHA512

    8cb2355d959fe4765a25602b0f9a4a49422153ed5c6b05a900f027a5d241055d5faa495dc1227a58b12151a4a580501ca73cd3a1f5d32d8fdc5cb63dd30cb3f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bd196c4d5593365caae83bcc61aae5d

    SHA1

    db1875fc4f2d0e2abc3960478bac70014383efc3

    SHA256

    ab0de8653676d84aa034f8be0b5bb0a99a8119c323658874c4ba34b43f19fb4f

    SHA512

    0c263054243b1630c5025a4e525e3817f74508c46223ffc6896cbf829b614ba4d159e7b06425b445efb1424321f9e7b3280ec690861ef0255f81b2e04b1f4fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96da82402ef8e7f32f52e9423979e634

    SHA1

    931aac0ba03fa4a7efa9835b7801971ad5e8411e

    SHA256

    bfcbd4c5241a0bbb68d35de294b17388507a9dddad7721faa5ff28fd39b27252

    SHA512

    8e92452111451c73db51b18da156cdac71df726797bbdcdf7074c70e9a6219fc576a0ab438bbfe50b7d86d6fe29f7bfcfd15ddfc87c46852b6cc83d370f37406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32ee9e0423f90f935c5a3248a2a5c9f5

    SHA1

    9973d9327d93a480fe4c5d2b20498e26cee678f4

    SHA256

    1c0ddf0677ad3bc6d8cff40d5f48b564ade5616112b9c5f6c054b129a5fc4c4b

    SHA512

    dc71e2b629581469324313cd66650dac7a2e00672b0a0deecabfe13e479bc2ed8051bb80c81f180d7cd981e21f47e5e401e541e2405d6deffdb162308ec63030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5efde4a8a5684078e65ed0690a602f03

    SHA1

    20321c5b2aa29628c6882dd92fa56f121236a063

    SHA256

    917c76e3fa4803aef71eb1e4b53378abe62819a29b976c9847686d15348974af

    SHA512

    6976214a4ea96185c4ebc288c060c7dfdb753ee6930b6815df722df29a28f1dfc678563f1c01299d44bcd5f627886678ff9d8aa95d310d5616978ac0ea150fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8ba3c76c2c67e997d54b2ac2c27c919

    SHA1

    c417905fd7bd75aa090916002b9fe3cddc6e3ff1

    SHA256

    4080d306d9fe5e7a2a3f7cdb54e9503eb63c1bfafd207e2d16be36ba207fca6a

    SHA512

    faab4240befb1faec5c4053bc404efaad45f374dab1c4ad3b11fa7bd2d5bbfa8fddf53d0297a43d426249cb97016e63e9f03707f580185abd9f3c729422cecf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    850276fc08847a872c4f3f3b59af9031

    SHA1

    71c36b4941ea2af5dca6db6eac6a4454666e315e

    SHA256

    6d2534ab3350e33bcdcb9e4ee87cbac8b0cf847a6e29df35c5daaff9f9444ac6

    SHA512

    dea59907328c421e5b18fe192f2f51f5e4e39b85e3ec4cb463ddb51c84c885b44fd24dcbd3490a7d1a40a02e3b601a2606efd2359ee98d99d1865d708a54dac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7297019f1becab74d52bd4d135cef871

    SHA1

    c7550594fbd25765c8c65587d7af8f997b86e813

    SHA256

    596695637e866a4e605164ec9e0f0473c97fda456f8d655792d4d060aa677a35

    SHA512

    b59f5690ca4cb793137b08d19e8282ff61be74e561d3b1f520774553f6b86444ea7390748d588f594183c1df3418352155d88b53dc2783f62310c572116b8df3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da216d0a7a06b14c0417809d2667e548

    SHA1

    b1e235dd87a42d889ff1ea447a041117f4186c09

    SHA256

    95fab3f7170844febef72f9db1a0636851647ce1401f70976d56859cb48dce4a

    SHA512

    5bf63c486acdd42a245230ceadd187e417006d357387422bdd2e07187beb40b6628e4d508a532b260ddf30928a408d7b2ba5b86d1998798be68bfcb7704d904b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b47b083b2ac4f4bcf99f877f139f8dc

    SHA1

    c689fb58e0b01bca4ca6aec01cc90a201e93cda4

    SHA256

    6ace84f4bec4e08f90aa6377daba79905e02bb2f41d876c5522ec6dd0f50b2c4

    SHA512

    781dac4a063b9870f410da265b254e2b875a1637fb902d8da1e72664ca88f6fc911ce585a6a0967a51e88004f1d23293417ee4cf1073028ab296a3a35f026486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    471bc9f0a4baa7d6057c9c3c297a3166

    SHA1

    b62e44636c0807953b3c2e8ec267ae4fbe315231

    SHA256

    2019bb75875988aa616278a55bc2e3b2e4980e69deb389e68ce125c8dfe25d59

    SHA512

    e965531fa1cf835b153f97a955919fea94a0152766f55a324476d7ddedc2dc484b27108a3b5c5e679cb6247a03ccecf170abf2d75f7e725e72e1c5b7190d6df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e57d261e2b56efe0605af4d298ae620e

    SHA1

    88b7e89ee3131511feab0e01df28912996d39c57

    SHA256

    61adbbb385e75decf3f1fe516c5fb12f4dde3a650dda0c32832df102a5db4386

    SHA512

    e2d6f9cad70d1075ede98d1cfda8f081f0e1b592f427b4eb3160f52cefe83f081a5aef972168865847f62a9e9d3cb58f97ea0aeeb6889f2ecd2e489f00e10706

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381b813ec5a76a84614a5abf863ac5b5

    SHA1

    5b4c941c9e278f548f4dfede91846c14a137ff46

    SHA256

    cc790b341350a663d5508af82d831574de264e50d0dd60f77e9ddd454de2516e

    SHA512

    00430cd1782e382dcf6408307b1f306138322b0160993e60dc86057b0f1c06eba368ad67566db641c75ab0523d97751da2e1f18fbb454d424b68c9e678b0aa0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfa644129ba77207c0e9bffac1a885fa

    SHA1

    cf9855619ed578a6d54fccc7193c2248544fa2e7

    SHA256

    4dbeb1b2cdbbaa79e102e72e9e89c8b4d89dd6613f8768a20e34de5a79f19e29

    SHA512

    2162fbd7b1d977783f104d62c3e34bae736e7d0258f36a6b47db7d8bb15734ebe40aa7e10deae032f5f7c6e944f10d72982a1f6fd9a72b29e3a4589620e84fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f7190cbe9f176e8f5cc16af53301146

    SHA1

    b921ce4df10d9d95ce0d5018faf9cecc49bef944

    SHA256

    c8527f98ccb735121616cc200e6dd9e4df4a38fb9e8517a7f78249459cf12483

    SHA512

    8c6c683e17e90ef352d51915877e9b8205ee6e3fd4d1e8bd1186faa1b6e2b2349ca8d6a47ce8380abac012e9348faba41d859e91ff753f0e6f1f9dcd39d33bea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    141dd54e72f043aeace73890e4eebc99

    SHA1

    b97f750262194939fbcc540d88a01f014fff5a22

    SHA256

    952d6b6e8e27346873324c60d1c11990a719248bddf5f1a610582b7d1c840112

    SHA512

    1eb5820049175b61f7c90c8c05295b3b0389c1a620e3fbe31977dc993782f4e04564412f279b573403a990075c335c7ecbe2741a2e5f6dcfc0796be9417147db

  • C:\Users\Admin\AppData\Local\Temp\Cab1009.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar106A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b