Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    10/09/2024, 00:25

General

  • Target

    d7554135d5ba42fcae062b5a235e9041_JaffaCakes118.html

  • Size

    13KB

  • MD5

    d7554135d5ba42fcae062b5a235e9041

  • SHA1

    394fe9f56e903712d000970db0514e21ade4ebfc

  • SHA256

    576515fc8f0bc06b22d24bad05f989b4560104cac1ef73ae4b2b07f8d4a4004f

  • SHA512

    229dd863e0c16fce64d90505ed135a295c77771280114030415e09f4ff7f60c055a18f387e4ac01fc43c70c02f14306cbf449fd4eb4048ad72e2204260a000e1

  • SSDEEP

    384:3c6qPVfPXnu49KFrBNfwtOeqxRXEzuEm8VjmFP7R9k:3cXNfP3+HxezuwkQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d7554135d5ba42fcae062b5a235e9041_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb54d5d46912849bc2a03c8dfbe6f006

    SHA1

    50bfedcc08f62da610ea3dc1db6d40385b542735

    SHA256

    548bd5766b2bef61a1f0ed5cd29dc2b6f8180824a731550b54b02f25c0d9d956

    SHA512

    27bcbbcbd52c997740de663dd6d96c8e4854e6f7d85ed43ecf0555ebf82ae3f60e36f60388371fab73484731c73715da13a9bb26f578676c014ae104c919db27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8206fa1db44ec9a75f4a7c584a7e1d32

    SHA1

    4112a9172e24b3aa91f1654348e51b1a7e32ff65

    SHA256

    76e3d8d7a1a499e0d24bed319b1ba7767b0a949f22da0ede2b7d11cd81c24dba

    SHA512

    6614040123b06fb54b7792db110c30d2175946a2c347894da34b62bad469d43f0617c9e7772b06850f6ca41419aa9af5d37bd44d735cdd1f7bf8e8ad386531ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f6a8b240ed14ca3deba9f434b228869

    SHA1

    366af1bc0ea9748dcc5be564378892702219e882

    SHA256

    c042261f2d2036bd11852c19d24d05a720855ac2c8392d40e38c40dc2468fc8d

    SHA512

    2c70a7b38fd45fcf624da908a4c03819602496a7146d0f8c339b2bdcb064ebaa29e94e3a08ecc6287175a89df49262d3cabad829066cb8163b8eab669fe254b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b12f1cdc58db1b87f285078392c4761

    SHA1

    a5448ae71a6415245f9a2ccfd222bf941c40c183

    SHA256

    e9606e8972a33874d3f56cec9c0a70a7f93df2cfb4a326cf0b411d2502a3c7c2

    SHA512

    f7e4c0e98367461f7681a5e1116aaad9d8c2ffc54d053bec1fc3afdb5380df52a007a521289393c795dd24706e0428b72c2cbdf3731107b3a8092658b4ab44a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2630002fe99210e6fad8e137a0662d55

    SHA1

    5962b4618e5b696fef8c603f8818029c60542d53

    SHA256

    fab7eb31726d7cbabdd3a8758f79eff7fadc90eb211282cfa2458bc6ed4317bb

    SHA512

    4f5d6505b11f2f089e50650bd5bf16d60c557f0a6a3503d1d6ed421e51104194f80c69d9f5ad243d25b7cc69e5cb6d9346dbda6f951789d3089cc2defbba9fdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dec09923c27fab121da62f8bbd8b8344

    SHA1

    fba03d83ad71eef6bf46a953890c4d0fe6587f22

    SHA256

    9a4b8d381f3199dcf46c0df69bda756becef38deae1156da309cfb69c45277e7

    SHA512

    295a034b05e2b4752a0f55acec3eff375d7a118ceb18be365863e431ac7e1b28c190a46c252052d8ce50d81e11cd15b853f489a993941411d014d37212852e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8641ec25136d5db766aea747ce9e46c5

    SHA1

    0b2f553d7662e945286cbab1d83f913d68738403

    SHA256

    d7ddc9448573cbfbe12417c2d94891b4f6846666942e4f8add614716b3c07286

    SHA512

    f483582e8928ff57662882a030c7a037c64f4952487104f47906789c857377cd631343f53447b40752cc7339ed7602752e5412e2ed56ef9e7df0984037217239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2159ba11bfa252190b3c7f3f4500e75

    SHA1

    2021e8560f9d258f6aef686b475b52acbd2cb2b6

    SHA256

    4c0831aaca9a57246ede4000ff459c749ac41d401c1ae5673435967958fc6f4a

    SHA512

    5524953cb28bc70841837502f9553b9a184986764647e4882e1dc54534d7672581c8da279efb4ba84bcc89943cec319f47bd38eeecd0766320cb71cbf1edf8e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a4fcf8df9c95a71715c48188c06eb88

    SHA1

    35dbd92980576d7e20308487102203b2d96674da

    SHA256

    150ee165476a286c9d6919be09837ae3696ebb13c33dde6ddd2131826aeb1eee

    SHA512

    38c6f2240890c6b0983c6b48c2b2885178510338af6e75d3c1d4bf7f78bb03c57b59642958511fc44c31731f45df409f628dbcb4bd2f2d9e3b3f6bbd45d280e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17da4c6416269ff0db89168d68f7fbca

    SHA1

    6097d8ba4b1fe3c789e8a7f4d4b6964d6df080c5

    SHA256

    234827d9a8f0098dd7c118d36c5b9a1f9934cb79fcef7ff2b1d2c1ba50fcb33f

    SHA512

    69db3c0e443724493fc30363e4a62ac289df6cdd48bf016447e05cd648a865abafb4ff449ae0e5abb8f2469761a221c81534a7a758916746eb286b403aa28e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b79c5953632bafc6b6f02d06b2d89d4

    SHA1

    8d0c4744f05d487ffbe2ea424da0b5268f39ba67

    SHA256

    901c9b362d95ccb1012a96b4add1c135aeda904f5da245049eed547935c7b11a

    SHA512

    fde97247c9bd7c3ca6c953c3040d67956a8d8f014378d6e96d3324c094acd06d85e6bacd86f32c0398b52588186fe000bc42033553e42aa832ce7103f59e5e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    908d137fd4caa7fb4a3abc5375d15320

    SHA1

    93492fdadcc1fc6f0609e7fd388b2b00608c3b34

    SHA256

    19d5633cb8bc705e4c9a0f999a9c78d16c2e53afa93a15c002bcb0280e94bd20

    SHA512

    7a41eafbc872a362cbcdc7c268758c88c9bb832c4daaaae616b1effd8a21da2e53b7cb18f8353a3e572c63d7f7626ce01891bbaed20432f8bc57475f19fc7588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13b3a541c44ceaafba5e61c3c24498b6

    SHA1

    6328dd2960b2b1670cf3df16c8d352cec543e73a

    SHA256

    f6b3a35bfed3ad2f0db9528013a8d4a080bf7bbe8015e8a9f794b2118ad1ce52

    SHA512

    abfaf212964d8e02974ff7537dc5d7140b35cb6938c97990ba32087a5a1e16ae238ebfb1f540fed9d0abf080005ace456cc0255622955c49cf9c27a33e00e6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8ec386e5c71a4e25d9ce56e06a5dd6a

    SHA1

    3b275ac7aa6f6affcc84dc2d84ec025c2c6cb07e

    SHA256

    9fa5e82850f9975c42fc96c3bc82e6da618226616d008923b7c78ae5a983a1dc

    SHA512

    802f2b05a5776f52b0a484e51a3a4f7e21c8aa2cc724732a8a226881a63e921e25ffd7f9a2795ff42985eaeecbcc7f9723ebad38d72c4b82d2e2f423d5efbe29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c2d55bd727e926965620497097540ff

    SHA1

    345bd1f4b15c2a31ff8572fe4023c1053a711ab9

    SHA256

    265ed4448bdd13a104dbf025f43ae8728bb6b279e0fc93a0dafe32d649f6e168

    SHA512

    7b804294b89e938d6f1d45800a069991c08335ee686b726c81f810670d1dbedc56eefeb0c812c00a4478a25a43762026091c6f2ebec6580eb4e99aed0c4c374b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5dc419492f5ad2e2a454fbf439fd4b5

    SHA1

    dde6d31b769f1b3571ad9f78411a1befe12f5d55

    SHA256

    370f93929c83a9884e1844d2c2d4646966637fef01551b055fc9cb03d0bb0d0d

    SHA512

    5e36afc728066e37edef738816122ad4deeca8e75ff2af5dd9c0aa9d30678278300a4c1084dcf1d66d4f2e4dd9d6c1dcc30beb926f18d9576d3cba2f2c302e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6ec1957feee786058bc87170ea775c6

    SHA1

    ba74edccb225cfe0b36f2bb2b4c31371bdc78a73

    SHA256

    aee67699cc24875b22987732dcb45e79d471428a4b86de412eabe12d384f4a93

    SHA512

    143e35a0fa3d8104745ad53f49b149829900809cceb9e0e914febcb9763ccc0136b151e5a9698c967b2f4db787119097ad503a7069bd33e285a6daa5cb1cac04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f084667eb359c31da6c853259559558

    SHA1

    3e483cd4c75448c81d4d8919e0f9d4e987852a10

    SHA256

    bead2d45731f592e6300e120cf15579a73b06f53ffe511a434501eeac5d024ba

    SHA512

    fe36c34a0ead8e75e458ae6c599e7936a24575734e5b5803cb7a6baca0700ef4380d9b0d31cf332452122eb2c6d6471f520c83d9f105e26c467699feb7951d24

  • C:\Users\Admin\AppData\Local\Temp\Cab6153.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6156.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b