Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 22:55

General

  • Target

    d73a29afab6e482cd3a0daef0f600a82_JaffaCakes118.html

  • Size

    10KB

  • MD5

    d73a29afab6e482cd3a0daef0f600a82

  • SHA1

    569b32093e244ae9a45233a523c8052fcff5246b

  • SHA256

    43e35c6dbc1d0c6550fe52a1382d700ea633b87721257fc2dc17cbef492f1c33

  • SHA512

    f9454b1fc0f041491e2f2d6244d6a6b2e08794ac6423d58b50a01b4d8633d0662c0134949f5507b733e4e7539b9da1d4e0c2932abaae9d39da951e2bf9ab8e0d

  • SSDEEP

    192:TzGicp1WoY4xXyhdd3ua97sxRk9T/kI00F0Et02AaO:TZcpxYhddT/9T/F0K0EtK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d73a29afab6e482cd3a0daef0f600a82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51fa21918dd59a6663d4d65fce6a61bd

    SHA1

    5262f30e5e35ffe8b0aed4971592cf41a43c6ab0

    SHA256

    560229dbb52f1bdbfa1d6c013bd1bb0042d4bd3e34060f26fcf44896705fbc2c

    SHA512

    0bfa6ee2cec812f1f5c281e095808b4da4adb97c9b327a7e217d1909282d913e5167d15913e8be7396a16dd7f5a4020254d2fd0513584767328bab8cd3176db7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca2a58b3f76401dbf47c11ff134688d6

    SHA1

    6c0ce40627775fc5a791a33e02ab4ffcdf6aea88

    SHA256

    6e032bdb1d228108b6f043ed67c9ffe4249cec2c3e7609188addfdd822d5eca4

    SHA512

    c61544aad30a4f7e738db77b45eeff9ea4bd3210cff9634c91f72dee6642e7a094eee907fa573087bca142f5c499f2364b7b4ede587edb931df7a3927ab6f698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ca390314e433d472fdb53c0a998e70e

    SHA1

    d6224af7115963e463f9ca2f6411268e39b2e46a

    SHA256

    74fd478b510fc17e1e8ba096dc4ef09cab3c82f15d3ee5aea16a3cb50f6031fc

    SHA512

    cc4ec74b7fc68e808b6d95d3693756976f104a7dc9cdc26ce126969a068b1607521438ed41fab3c5b2dcecd513da2f4021a860038530c06998746ab137068cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e72739b67a4c8317692c4f4f518e2dcd

    SHA1

    7cda31c3841f0cfe601c5f103aa67fde037edd20

    SHA256

    7c03337a2806d61a6194c455e86be488e2d46f930ee8dbb9eda30a436626bc5a

    SHA512

    2a6b8e6eaa758be174ca01125e8c86d99c010245c76b18a0691c7e6435e2310dae7f25f6ab75d2000f4ed6963fd772fe5113e248f8e6a31b812a58ce789c95d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9243956b0e58468e4188bc217ef55eae

    SHA1

    666aea815922bd8ecb9459ad610cf3b9a712cbb1

    SHA256

    54afc595f1ded130729a6a100c2c07515f7e5eba7df36a437d711502162dfbd9

    SHA512

    3d2f4346fff615d3aeb48c638e7a4779c15f20a21b2980a020c6c8c1528cbe52212f9effdb39728e5dc7448c5e24f5f1ff7cd2128dc4138038529f2c397ee9df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94d2ff25246d8eaed377bb720f5281b9

    SHA1

    a6952d800515ef6e36d1cc08eb70274df5b1ed08

    SHA256

    6d2507a48e778a6b9126df6ed08c0ea41c6757f789f049261cbfc842548d3a4a

    SHA512

    44378e2a0755e240799bc0411413a85ee741b1a9e3c6b3d842974dc20fb6f23e203aec60aa452a5ce19de8f2942a30ff9f80ad35f0dcbb7a61155d4ceb125161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a293a7f65b69efcb6ca6af0ea53e681

    SHA1

    0e4b7460b85d729000bca9563ed70b0704d439c8

    SHA256

    dc53e6b7d1680485dc758430ccc7da61732323d0edfe1fc36c3062fcf5ba7e1c

    SHA512

    7e45b01b17910d5c2b699b1cca481597e862088541b3b0c13695b3a3d182b8e618fdefbc15ea3b9334d32b9a68a862c75ce9dae6db964e451ff6d62616a5b472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cb09acc8855f9041857dc1043641426

    SHA1

    ae8c22a3cc5d55a687aaff007835f205db45c4eb

    SHA256

    b3f211ac39abceb6446bd684fd6a6833c1e8bd55b499e6a619f84580240f68fc

    SHA512

    df5ad0807dbfb7f36a0442d3e2d19b1fc6dda20f39a5b6201ab255113f4042b982aeeec633b22c82508e3aacdf995acbf9b9d097ff77b30b3f6e69ad97f54de4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08ecf5b61d00d572df293e37980002e4

    SHA1

    6d4edb67bcf29695612ee395ddb3f74d45d24699

    SHA256

    132360adecd145b3926efac80467bfed9c2f38654665c3ba73bc12f3d258b1c3

    SHA512

    c1142b00b0485ca4476f8f1c5863b14082650a414060fa03b89da3cec7bf2d101f4e2bd52f89a262f5536217e9ef440b7141342c746d1c30ec0b989869af80bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a247fa994e51957dee550f5ae25f5c67

    SHA1

    2320ccaa05ab6312abff6f8a9947954171cb1b4f

    SHA256

    996c324bd4152867e9a70f981a86e8c38bb5461707df1121444c8dbedfd77ec0

    SHA512

    2e07c9133040fef822d3106b591d9852b8655d4f5348f7e9bb8f556582de33b086b87d1ce9eac0bebcf1530ee66371999b68c615f5f88fad39f17bedbaa636cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aca47260e6e68f90b622c19230396a0e

    SHA1

    a08218d6523afcb2a62992f39f55785ab2f7254f

    SHA256

    9b3b1d05f997d8d010f986c9517ddcdd1970fab0dd34245b0f6eecead3487d17

    SHA512

    2cdb9bc445d0929246c8b0f64a3f0bd1282a136a99d87b4d40d4778869774f474566fcf5380da3e39e6c7c19c1c5c1f66e0d88b5e05a8f272f6d32bb677d8228

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad98c3a4668450bdce4e24d489d6dcaa

    SHA1

    4b574d7b18d8dfa8ae030e23fe3e598108bd17a6

    SHA256

    12db228ef27f64aa7a1edfd008095ed054c37811b65ef279e1d08968aebae163

    SHA512

    321079fa14ad65a335fc061017ad8065de1e83811bc14bbfaf8e3e94e47941f92dfdc01466c56bc632179fd0af3d8d595fa4877177732fe8e4ba7eb92092f222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bde0f21c23bbde207712dab2be319288

    SHA1

    c61a4d60aa7ebe7b0f3de016e4429863563e5726

    SHA256

    f8b257c97750a22d1ecefd03ed081eb531d4e151904e10efb716ddd8121ddfd7

    SHA512

    2667410662908f4652f09786238e22e4c97158c9f0ec34db66b9fa587082f4059c13807ea1fadbdd92be3f6fbae1324ca5538a5213c3acef35b1fca8b8612cff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14be0f1a905432c97f4db126f6a425ed

    SHA1

    45ac95b98a1d0b800c396e26d5124940c36690e7

    SHA256

    85f0242c79a0e730e492d928736754ac2aa10259a13df9501f98aa7adc6aff4f

    SHA512

    142dc902bf8cc53bc4ac8feaa21d700ab0487d2dc52bf9c55ffe1f4ffabf9d2cb8f8cbb2464ab8f15bb95198c0d0ae6c905bd530f72594763e973f269e48c4d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ffcaef46cf4d0928ba2e315a62ef019

    SHA1

    3d05863ccdb5b497b5dd053d05835066d9e23442

    SHA256

    adea369a5db74409677b23cad5954fac2b793e17ff5a5bd576feba54ee8b04b8

    SHA512

    82e3cb29c1bc402b58d2d42b742ce125d2d8f1c9e2aec24e08e09c4053aaefa141d23f2272cfb8da3b8b7f68ed65494f2004a96277f8f5ad3f54b573f12ef591

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3019bc84f0c668e99589e84596c5676e

    SHA1

    548bdaf470222447e3a8e2dca9c3bbf459714bd6

    SHA256

    152425329ba23ca2813ba281b6835be321fa593648f96b62b051786dc935a835

    SHA512

    facc8915aa4ab3dba93851bc61aff16fc8f7cf63b24791b532a18b3b72d1558e4d961aa8b67bdb42abe054073311b69e3ea0eca446193b1a78951251e6b764a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73d6036f7984fbee433d7caf276994d2

    SHA1

    e88a235cac59008082c405ce34e21d4c867a73c9

    SHA256

    a4aa80230e03ccea3b987727310df3022688dc77de3e35965c092834eb66caa8

    SHA512

    ad98f08ee19644b9b48d6a5e9745aa45c58b6f952daf3cf36c74aa29241724a382933a30a8edbe1c997ade4308f2f1e05d0564c06ee9449d6d8c88fcec2bc580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33d9ff729f61b33b5aec1c384201c835

    SHA1

    5f2b1248f3ff80771d92176f655e4209bb6a5c25

    SHA256

    3477ba951c9b0ff696480edee0428caeef00ee558a7a21c713d93748cff54260

    SHA512

    4f7ab1bb1362aa86a55e375412f6c946e355fc41e1221c6e006e2139c59e9edd840ab6dd4e8ad84affaee2cfa6d879863229e07532cbcfedaf756769aae0d09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41f4b4d164b0578b0e3c49bab57d307e

    SHA1

    ce407582712f046ebc8cf29785e3e7f5667f0f98

    SHA256

    091cc5ff38684bbd0a1d5b23c4500287996fcd88413a6780799d216cfbe3fb6f

    SHA512

    dad94b4a06b73cc998354aa6adf76a3b6e4e7cc17d2afc39e2b985c8afa91d512f539aeab72654c25b69a01b25523b7ea3a85901ca1429d7c7b719eef0d401ec

  • C:\Users\Admin\AppData\Local\Temp\CabB887.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB946.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b