Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 04:55

General

  • Target

    d9a667eef0ab203b40da57bf5de11bd1_JaffaCakes118.html

  • Size

    9KB

  • MD5

    d9a667eef0ab203b40da57bf5de11bd1

  • SHA1

    00ef92bf97255dfe4c61caea5bafd1bf64e967a8

  • SHA256

    ea70663f51ff00bb0373cee6da093002295a25f743aef6daec77496430716457

  • SHA512

    1def5a35d701a603d77feda8d32341f9269f303a3e0558a87feb2bf3502a828796fd6791524a6b1c09093ed4194d9db67aac6d70330a274c1c9ef8c944def65c

  • SSDEEP

    96:uzVs+ux7hULLY1k9o84d12ef7CSTUBGT/kHKpU6+EJ3G2wMxM+GscyHb7Utm3GG6:csz7hUAYS/IwVJdtcyfhPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d9a667eef0ab203b40da57bf5de11bd1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1388 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3de14deca88ebfe897461dac1f06969

    SHA1

    6ff38278e1d9fa59b5e4a2347523e9dfad98629b

    SHA256

    9e22a3ee11052b160e87a5fa4ac01135d643dbc26ae79eb6a76661d29f0f3431

    SHA512

    6acf827d599bb44e12ee254f4c899329a44d03f5bc6940e14156a5412bae4776b2dc4e0ca305f5407246f7daca0f6f624572d222e9e3cf17fad33803fe1eaef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42c466f60b1d6361b53f4aca5bbc60e4

    SHA1

    fd0f85e27295e687c229c63bbbfa142c1b530b76

    SHA256

    4912a9c825cedcefed4df5d2970d70e4cc3d3045fca0bf6569c13fee4aa8e1f2

    SHA512

    30563b7f5de53e171c6c089631345cecc9ad0e26ae734534f755b4b9a73f9fada336cc7d37b6f1e11024312353897c295782bbfb60addf572e123b268879b721

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69a4a7efd2606d89da4cdd7b919aaae1

    SHA1

    ddf4d11513235629bf26f0d3657eca60bf45e769

    SHA256

    f524ed5a86831344d11a4bbbfcbe95cfa2a2987af219e44fdde4ee62fc222994

    SHA512

    bfca8a8f4bb8705d95c8156fc95515d655707af49cc14325d705501ab2bbd1a1fd7030c47bc119e8cd7f15c897b647e51c6661526391e575eaca1aad656514fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9da6c5504e26196bfbc574a6a12acf17

    SHA1

    5e64872817ddac809d2f3f1f34859166074e71e7

    SHA256

    f227dbed911a867e3018b035b67609769d2fd21e75d8a097a7dee95ea99a276a

    SHA512

    db7b33227af9f0bbdae5863a20b4029111bc5a4d3efdab2520e17c68d9f16669ef7630ab6744ff165da92dc825d2c936551096db5ced7d84418addb0afe2c2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af615ebff445f4317af779c720314e26

    SHA1

    f8b00ae35f120905f213ad061b80a431f194af7c

    SHA256

    d0b1ce8beb0f42a4e1c52713734799519d540b96dd52539dd5ae07f2ae0d40ab

    SHA512

    24e4f3887c2eeff576017fae6fe0855c62d24b5ebdfe75a209674efc460b829d032b5fe87220902771bf328bd5acd33b267c935d1439c2d9748d86eb1731a8cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    402814f761f029dc03b183e177c0c940

    SHA1

    a5df73a2efdcdc0384fd785d56d783fb0821bf42

    SHA256

    fd72aae0ec317fd7927eaa1d3b898c3ef2264e440148ac435f0b1e67d31a803c

    SHA512

    4f0f7b9becc0b021db3c83a26c6eff1e101a4c6e9ffb6cdfb6e89304da5306af0b013f8d784bbde8f33a760673392afa5fdc520e6aa8a0c0cb7abc002d7551e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c9ac4aa938f5cf727528e7424a1fe19

    SHA1

    4e02d135a536f447bf4007c7222ea7aa12de5727

    SHA256

    0e45a8f460504f97077d498a8caba737d9991b74c75695ffccd5e1148b6b3a78

    SHA512

    fedb1b24e325a353fe41f13f3b75a10ac317aeabef308f24b4e137b1f971837d732a3ff54dbadd34be09e7d3cdbee3deeb9f95610626ca0979d81c7b93d6931c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8432eacb6654a9e42389acbdb1e754d9

    SHA1

    1553523e12ca4ade86bb5f46e6778570f9f4f253

    SHA256

    bceb4173a225b0be4539e04af5a28be2edfd25197deeec5f2b2c49877358740b

    SHA512

    6334e26129b70b9fb5a72b39488e4ebfb8ed85a0da7fbe565b4364d99a82b735dc2e3e895da7e313f8544ba95b18c1a1fa3e8e96fb995081fc2c9cdda389e271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3324fcd9d76502f6c4cba8fe0c6281e6

    SHA1

    1fbdf7b8ba75e1db745e1e74f9c8129e95bd03b7

    SHA256

    e363744c6e288963add9b1dea78d41fb6b92699bba6d39183d0be6ede6de8b59

    SHA512

    5ee0ec568888d96ed4626703d162070e39bb60d5e16c970a6ca00b2a59c02cff8b30f64a1c123463fa9a55430a09c42d5b9e0752642b0a60d0ef93afc34dace6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac9e59a0a7ab3db0fad486232f9eedc4

    SHA1

    d173a2a6922053f70bcb8c8017bba3d8321b8785

    SHA256

    7f5a94f8565555bdcec34cd18b3003d8f439b304b3b2060b32f8fc8b0eaa1245

    SHA512

    9a75045c470ee44e4a1a3fb43f94e7955ac60e9924daed199b3a6b9d279a1e798cbf282c0d90a61c6e1a724cab7962f5a9e0ff0894ce1e7ca5507d66bf50db4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a2f284cd3953bd1dfb2218f460e6a71

    SHA1

    87e19d9213ea381c4eb558cd81378a1db2b0b4b5

    SHA256

    b757b016fbc7a98789ed2a53f08aa66a235a0c3dc17c93b3f70c3d4354399f7c

    SHA512

    a1f050df4c1cd462bcfbc157cbd13e934fb75655f0feef8693592bb01d6fdbb1782637d8eb3bf96927d036dcc86725d32416e43e6aeade6f768cfa9d4dcbcdfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c3d5c2b4ae5165033d2a6889ffc6d6f

    SHA1

    1f7f6b46101ddfe6a35d5af55dafc0bbc6f19d62

    SHA256

    215cffe2c12131d279db1ed18a85a33a5cdf6315cbfcfc0ce08be2e288ac0a8a

    SHA512

    65a251781ac10509c92d6ece046e396e67d6c216c0a9dcb11ad4155dea0bd2755e06ea6bbbcbeccc890cd540b5034a370a19991cfc587082db1a55cedd761e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85f7c96ca7f05f4ad4f3eea75aaf4b96

    SHA1

    7f784bab64844411e697de8fcbdd6e779e851114

    SHA256

    ca1718ccb10c8c0e476bbcce02da16f59cb09a8817e70b4a55023503c2976d9b

    SHA512

    fa079a500355f98f126648c6bcc22973729673cc6a6ad9031e014dbc4007b486f500d2edcc7c8e8b4232485a8322ed22a70945b23d0d53aaa719b7ef20c5f300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd0f16eaf76ddc3c2ba4e5b2b636ebb7

    SHA1

    46ddc76f3972743a68d27e648452235272d2286e

    SHA256

    4b00209a620419c3894a402f95f1770bcefea7eae6ddfc99f0f263d2485957bd

    SHA512

    ab93057debc05658e435a734ac8cbd6af5604342c6e0531678b8c28882c63b4c9c8d7073de5108ec20441ea1d4dd9ceed119de36d84016bf36bb485fd126fc85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4679ed4c04fec3405d63d1c5756cdbdf

    SHA1

    5b9e42053881585b6eea9dcce12de63263113d42

    SHA256

    78738f71828c94857d49335976f92aa231b6314ae6de629450d6a20029c929c8

    SHA512

    fd7379d1fb0ec561d6a89a7214a032a29e99152c7f56b8bcb5eefbfb51e1dced4b2f353a095fe2c4c9254110dda9f1709709f25ecd15fa3dd7f95ff6240eb51f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    915cd1e8c3d5fd2987deb36f0adc282d

    SHA1

    76af138830ffab211b8f8f0f92e6f9b7b24be508

    SHA256

    9fc0cf14d37bc1bbc364b7c5d6732699d34320255db6d0623c86f361dfe0348e

    SHA512

    092d0d645d834e955bd661baf3e44c2931e96b06c3d71a31cbd87fe706f7d6c407787609e6dedcaffaff072ed1d47d24bd16ef120915a25e97f949bfc4f09aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4be6543b467af3f6b51bf05c55d38678

    SHA1

    816b923a47fe3af6be8efa3809bc299337496794

    SHA256

    6e5db2901494fdf1006ae32631610a39ed10ca03f9a86b8dcd4faaaf2cca886a

    SHA512

    f20d591d6cd6d0040256b00d01238a3b4c933a65b86aa0a5cc784427b9773bab5382f022b3ff8877a70d84ed49c7784670de32504e333dad1dc09e1aa609894a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e567c673ec24ba3c4d09ac0c468d4973

    SHA1

    1aad29b53f7c0c388c1c24874d6bd4eb51af21b9

    SHA256

    89e868e36a9aa27b15b0ccf2739ea0a7fa6be650a03aae731a1ea2d990fb496e

    SHA512

    fee08dc62624146fa4ab96a56b821ae677e669db2f0df98fcc06eb720dc673114e53e52821d3467060714b006565b442127ef45207480aab0bb202fbd76b88cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e194c46e1bc870d5a187184ad6c3859

    SHA1

    03d335cf37ad9227573b7d7ac0e377abf74ff785

    SHA256

    f52d62061180be1300770329cf00bb2c6b8fda4f6ae4a21dc34a69af86818ff6

    SHA512

    17a0a8ea72ae1e75b3d123bcdafd97be443398a8f90def90b6922b923e7ac4163fd2a301a0beea001cb05a817d1e5d7983b339818b5d6352135ae273f3734285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1091baf1384cee50b6423ad76177dce2

    SHA1

    7e241e728911ab67bc4180b258c928490535a441

    SHA256

    d5d629d2e252499c5b454513fa39b402e9caf4fdc7e29e54831e1c995025efff

    SHA512

    6004fda8082122ed45a71683a50540030454ee2c226726ffd8ced4afd2c8149fc7682e57699d1e28b8799e11eec5f3062fcd0d82e25a6230e966f1f9caa665ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    052139067617fe64ef3e10e101c18646

    SHA1

    b85ffd27eed1c01163c9a368c7016e961312bf1c

    SHA256

    1fc2437b1490286a3fee3601ec2b1f4594d9dc8334043d062d7d0a1a626bbf5c

    SHA512

    fb810ae18aa0d519b9d0a427dcfa9961aa628891827f6ac00e57df01e33e5bb219ddc32e4d7c6c09b9ced694c20484c728e5ee30fe007b33cb588e8a1658730d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d38a51d3feb146e09aa87c9c6d8c48c

    SHA1

    6aeea3c8014598f7cd3e8eca2bb0867cc5a45563

    SHA256

    48a2f7e896bc9ef9fd0b3e6d8b74bbee97bd6649f71a1b4bd528df9b4aee775a

    SHA512

    60eb62a195ec851c6e50ab986e7b0c5109bfda64642f12fc603d3fbe14ea89003a8adba16ef0c563f6c9c731f36ee668003913bbb64cbefdc71f942ad841edff

  • C:\Users\Admin\AppData\Local\Temp\Cab70.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b