Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 07:33

General

  • Target

    d5e0b9bbd19471006b32f1d49af1fc54_JaffaCakes118.html

  • Size

    42KB

  • MD5

    d5e0b9bbd19471006b32f1d49af1fc54

  • SHA1

    a9a327bf65ed9a66524f661dd427e96ffa98e1ab

  • SHA256

    631a1d4c201d5108182aa17d738e622ef5f6dc111a32d06286d2e5d309cbaaed

  • SHA512

    653a46c05a833dd0e8a5d52fc9d2da9e6a8226c8a5fdbf4a594a5d6862cf0bfe9fb84ac8737285bf5f7ad0094900f5e0647fbe2895fb7aed1d602bf832dc72b9

  • SSDEEP

    384:62DzKAiOTU1O43NV4jUpKhwqG1lp9hwqG1lpvhwqG1XMhnvMmqJVmj29oQ2cz1es:6m1OH5iTqJveGIof2ptuM+NFQU

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d5e0b9bbd19471006b32f1d49af1fc54_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    3ceb605081f4c9ffdcc10a296f996b36

    SHA1

    62f4408689b27a74fb4b32edb1033ec48d57985a

    SHA256

    ec66d68b54b823a2ce067f4105e6a8cbd8435b04c9441b840b27d449cf742df7

    SHA512

    afc71786ad9c5921fe022e72b32c35b2b70eaad827b54f9425242a84603c82271d70fa7078a586fd5fad3e72e59d2c9aafdfa8fb24fe42ff98288d247980f32a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    26af6a9cc04ac73a05bc5a90deeca894

    SHA1

    58d8137ec5fa60f03b00a1648262d2cbdc5f192c

    SHA256

    0e55085815a9ad91535c3079d201806932deaff71ee6180a950f081c35afc4ec

    SHA512

    b53dd4056b84c66a4d79fea7ebcd7ebc1b6e05642cfa7f682542cfb851b41a6c74cc82961256eafa25d7a989fdbd3d4af2bb036f839310158a171eab1ce00b96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    353987b76eceb9d0626d60417552a20b

    SHA1

    ad5fa8a73edfcbcfb0b89b05aaa759cfaa7bab49

    SHA256

    a40aa9dca424247a76b88fff6e6aded793365c2b5cc4967e10f17e8dd2bdf901

    SHA512

    e194c319b87400668a89ed568aab124eb61cfb213dad34f5c4aff76aff9f9e9034239a34232a809cf668b11653c18e460397bba5802ee9617809bb8db8cd55c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17584bcaecdfec829e314fff14c34607

    SHA1

    866cb1162baec9b6fde2ab3e84187b313ebe148d

    SHA256

    b710bce6804e324f51e06c15186518ab5ed7ca29438130182a903e7f32a8d20f

    SHA512

    e53c2a50bc58bec74d1bff5e556eb945f6750ec3dc10dff4d8fb519bfebf79e3819bd50d74e31bfd65fcfe00efaa20d8e63398b2623dfbcb591c18dacdf1cb6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf069c8938166ca0d8ce8cf7ce59105b

    SHA1

    b99dfed3e64f66739fa920cc0b248891ff993bc5

    SHA256

    6c5896ed3030defa0cef8b25403dbf5e02a70c4d23e8e65856261c784c79df52

    SHA512

    66758e9588e2d117f11dd76b3c02bd0e95980138eb284814a70ffd4f64e7574a9a9c5b4487066654df9f2625b52d34a6b635457bfc76dc9fbdf9ec312947e4b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2313f13052f0c55727546648610e3dc

    SHA1

    2011a4b55ee7601e1cf1f525efd086b45d23435b

    SHA256

    3488f87e10fd4fca96be5a6c556eac21f4fd433435fb5cf9672c7532198b4325

    SHA512

    dd6d6a4051b7da69a5d309749f6f6467227d7694e8aa040786aef3c663f043e10f6a3d8433de90e511331eade7b60bf50753dd843bf31e76296ad76f7402bc35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e704c39c10fa08219e65dc1cf38a93a

    SHA1

    7baf18fe1de8c4657061d998a64a0ef42763aadb

    SHA256

    568a743cf7f54b325bb5b4e65bd77618befd23f38af0f89c8d7064c4bbc14faf

    SHA512

    f40e4584d98e2b60e0cfc26e38127be0bc9115cfc087887ce211e62ac0f3cef693fa005fc3ec75397442a6cc5a98c9f68be65d045f5d857478887ca139ff2af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2113098e15e6620d2f51dae5fb5a2dc0

    SHA1

    6ff50bfb8f6314d0ffbb3315d4af0e4580a186b4

    SHA256

    cbd16e6ff36830d48176dcf9760455aa905c4b689870ff51e9bc7ae02ba27c0e

    SHA512

    ee8542f0e970c4d7029ab12de76ce383b7a508f5cbcb412f165cf80d001e294516c3f0671d5abfefd8aa19aec6b6d063e6af894f59057b10ecaaab3f7cb71873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dd6fde451724c00bb2d5be757e8af5d

    SHA1

    6019e9640a51e3983e6058b4fca864db088455ef

    SHA256

    fd9ab38cb02f331cbc31c986009b151ce03128d2025cdba34b899e16339fda47

    SHA512

    9e1a47f37c864803a40143354d94aaf850733b5fa54b5b823995f7b4eaed8a22c96a12ef44361a3e556f9d52aef166cef78a8fd1f87260e03845bf4a5cd8e237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1b2e4b6855be9aa7e20a76c569cccea

    SHA1

    f28252fe2443e2481d1d915fa7f2826090d0dddb

    SHA256

    371ea90b767a4b55f816a09e88a6591dcc455d6d5b51c9b00a4a43e3c96fe129

    SHA512

    bae9ba8d61ff8ba9f16e90aebfa48003c04f60709fa340fa3a9a09a4c9a2fb492a39c85f1c58a3f07163d50e98313ea3e96580593fe587a1275ddd77a3fe30e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    871268ce04bda3fa0be2cef46802545d

    SHA1

    9538e45d5ab9074719ec6c042c8d8a8282b3b4dd

    SHA256

    e27cec5d2b33c991081e2021e618184719c2454ccb4701932f0bb3de6e77373e

    SHA512

    8c1b3089d27ceb7bb4f5e9889ce266054ddf25da05932bf7bf58599037c1d74403fc2abc8cc79c70c3f002599391c7b6d06ac1af5c56fba4f293e8e1b163f2cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c80267a922aca6d4e0655db7f63a2804

    SHA1

    7b7f9aa53ae189568af782e94feec2c246d012d0

    SHA256

    134e2e09adb8713940773441cefb9b88eb414f305b5835dca8f70c8a831dca34

    SHA512

    a25f86537d7d37ae53cd3ea122f9f48a2f0021b21074c5fa927c982f3fdb034b11348b6098f25501265c1db5e27c2cfa023e737ba67e7363dd81fc3e8975fad6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c67493ba270ba9301133e4e1fb5e6fb

    SHA1

    374fca7468743214914356f4c77f7ff77f42e5ab

    SHA256

    7a11f73b755c5e0a64eb881a1089b8c1c1cce0b149edec03ea86820f4a732c72

    SHA512

    3d82b546ecf2656acc048b15be4f1a85c8be48ee49b2f68347e513a1b01b6809c16e33ee43835587889f1a092f5f51ea180c73a4c835c6d41f577759e676e9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    905a2c2e34d221513a1ffe245ea394dd

    SHA1

    e699a49ff0573e500dee95191a1e2682bfb309db

    SHA256

    d4a44eb81667704162b4f1f4bc7ca2c02b3c985edd25a41d955d32d22752ca85

    SHA512

    e7d0ad78ba905668ddd5be0b925e703b21ff7f35e468be5228ace7832683574919130a3ed5b08cb8c91a7c2a9c11582745754b1e02dce0493eee5e3683ac0895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8d1c92d7b058ce6e7468e4f041ac72f

    SHA1

    214b77ecd8ae70298df282336bcc758e416dfa51

    SHA256

    d25f955b0f7bafbc9f86fd818938a280d3553934ea0db81b0b6e83d6a9aad2b2

    SHA512

    24281910ef721a5cbce6c4ecb868c3886feb1738e6d1ae60ee84e65ca1ef105b1fa00c2b5502202aad3963b526ee15949d7e897ac9f634180d65bb69791b5292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44992c53a44bbdce64ac6de8e1b27379

    SHA1

    a73ee62190aa4b5328849b670685396a2d375212

    SHA256

    993fcbde7a3ab53b2cd95f0db9f409eb8e783fa89c4ceecdb04d7fbc74b26f8f

    SHA512

    587fb2a25e14918e4a5bf2dc44c2005372ad8dab8eef63f32876f15366e858b649aeaadeea9f22d495843518527cd3726a8c987cf697128e58880d265c1118de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4253f60cabe8930d526214ebcba3b6f0

    SHA1

    4d906c210d12c586a0b9d1b146071c49604a618d

    SHA256

    b01c4e29c78da155397e888a8699fdc609991a40d23064c0bdd32fea25569bef

    SHA512

    b46e7988f9ce830074b6a821f6f314e1243785ad22b79b89110ad4100c4ce4775770cd21163d6a2f3bb7de191dec65163b3bec673d550c5554a4555d8a2ec102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5811b0680a33e715bf4948dacae3dcb

    SHA1

    5dc1a3c127fc2cbdd64d988919898f682f9b3c24

    SHA256

    03070542e184ab276a79dbf98f20e7a356ac963a8bbcf1a19bb5b8e756815ac6

    SHA512

    147ec629fa945273dba6482e6fea1b008d641adc38f55e02af2af41266fd6bb9b72688a17f6d429bf9c02a1b1c3535e77150af6cbe892011f2c26c73334b7e12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f61f46c8a6ebd1444e532233aa59179

    SHA1

    dc7a3e32792645e277c498a62656431a44cae925

    SHA256

    5208b6e1589007616ab70c48e53e2c30280997ff816809e570f280ecfdce3f39

    SHA512

    6c748bd03906814f4251d085316a5c6535978182ef1ce5200eb8d929bc96d674cd65c5223de380acf833e6351cd5eb29d66e712c7b23383eb4117ae16de1af8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70297772030470df44b39c466dc70189

    SHA1

    3c78d503d8336bdf37f9fe82fa030cb249041d45

    SHA256

    18bd2b4172c8aa73a948fd43e58eebe3711697e2ae576aad60c0c95f8f1d1887

    SHA512

    f9060a859995fea379a11ce05a2bdec36430f0b7413c137d0d405b28bacbf6d06eb7dee48b1f81f23aa62bd2a19fe74fed6d333bc2c34bd912ddae0e7a8d039c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f8783624e2c3d758877bec9eb8ddabc

    SHA1

    00514b8f73d244e460ad15d83a493fda84d3355d

    SHA256

    27df2515ba532cf53ee3e5a69ce627adca052556ccf74164c0749284eb075fd6

    SHA512

    9f84c502948092aa334ad811c293c4d33e55525cbbb9809be7670381b1c3178b33fe914abc8412bddd3cd425833dc5a5d06ed5382d95d4a4c66db3c2e44e636d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    127a2567f97cd3a555183caf96ddbffe

    SHA1

    3e7ea835c3089596d88e0f943db729b471b0e21f

    SHA256

    ec38c4f2a82e62a03ea9eec490a99ada8953ad38fb93a34b0b954fd306cd8306

    SHA512

    6bf7a4533c50ca854631a2bd37e98fb9a8f568ed1c7d995c5bf316c541f7b60b185790c28a6734c2f360189220fa63aecd8f42b8ad215dad8f03ebc078d95199

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\recaptcha__en[1].js

    Filesize

    537KB

    MD5

    c7be68088b0a823f1a4c1f77c702d1b4

    SHA1

    05d42d754afd21681c0e815799b88fbe1fbabf4e

    SHA256

    4943e91f7f53318d481ca07297395abbc52541c2be55d7276ecda152cd7ad9c3

    SHA512

    cb76505845e7fc0988ade0598e6ea80636713e20209e1260ee4413423b45235f57cb0a33fca7baf223e829835cb76a52244c3197e4c0c166dad9b946b9285222

  • C:\Users\Admin\AppData\Local\Temp\CabE0E0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE0E1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b