Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 19:19

General

  • Target

    db0d85cf37d518f3485065a5f33def3d_JaffaCakes118.html

  • Size

    2KB

  • MD5

    db0d85cf37d518f3485065a5f33def3d

  • SHA1

    b0bc244d7937ca5971b8fe7667f8ca6ae85873ac

  • SHA256

    7664212f0164a793c0513d535faca71826d8a7ada60f0e71d5fc1261c249bbdd

  • SHA512

    923b7cd361f42caed03e8cc8bc326678ce154a94064a64f4fd1a943a6a155d16fc67342a2dfaab9ab9af17188e040c85290168b83098f16533602c8ebe4054f3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db0d85cf37d518f3485065a5f33def3d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2828
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2828 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1232

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44812336e0cc81292867dac24314550c

    SHA1

    0f92411c82b41809105570d255ff1705a1ac1fc4

    SHA256

    b2af7bb359afa0b1e98af66204abd5090258baa554df325097c34644d7604679

    SHA512

    a583e0a916baefa6f28253c770c28d64201710b388c57c27f3ef4b96bc3d121b18b50d0b43a6b4e0cdbd9014072563b96e14dd9eec2d2d32a6a002ea7144a5a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc6e14edbebfc249115396ae853b1ff6

    SHA1

    1dd5d5247c87ca1b85a6357ecaed6816e8cd6f03

    SHA256

    3cd2f78767f27e9a283c84f0a560fbd04eaa73733d6286720d0c90083643cf67

    SHA512

    a621a2fe1adc2e7b77d5a4e544bd015f991dfd6010adb7c80dd4aa22c020cb1b61a32c10f682277b8c1e48f35620fc4d443bb0a9c2f306ea87a011adddeb498b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0a2d41cece447698330b88a16e3ced6

    SHA1

    3ebdfc14468f56e411e565281c48bd0ab6835022

    SHA256

    01a605bb10e1024dca0a2da42db3c1388e79089ccf2fefd1144919319f5e1a19

    SHA512

    fe15fe8467411497844738d3b2bfa8a9876cec5f51566bb9b84b55927274b3de415a522c7da6620f5e345ac1f4e10bec5dfacc7e3e1afcdb2f9cdd6ba61d4861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56ababde31e3fadbb6782d7b879b8cda

    SHA1

    b2c10d16928c2df910b505b6d88fead7c518f448

    SHA256

    e669d374a1e0c26b70d5087390a7cd888e89cc2e02b0fae1fa0caa67ff30add8

    SHA512

    a4c41df1a17b21ec8c83d97df925aaa9ed45ba9fbbb866bb2ee80dd7bba0068a414799ccd6eccb8a2e8d24a673772792e81c95826b8586120ab48c3ebe7e339f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc39241343fd39b8e946a750e5f11878

    SHA1

    bae19f3ed6e74f302fd302db0e5749c1734bb400

    SHA256

    dcb502e1bba4197a591fc3af7bbb5d168c01349069da9a422274573a667de154

    SHA512

    3520a849f0c25bb50d7d4472d3908d1a8131ca8fb47117ca4e952e2af6a6ae2ca08079f550742e623b06d9ee3b3ea9ac4af80dd4608bf61b22ae8e16a9a99533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    976d68455d69fcf73fe9c70c20653e2f

    SHA1

    342985ad02b230db6f1ee8c7b582194677051bf3

    SHA256

    fec6bdf25cf768ca3eeaae7c5131e1dd57d43f55e78e1f748348601f0771fcc6

    SHA512

    e6f107a545710c9353fb0027a5621a48942f142db6f2e9d9518f5d49cc2b59533eb930ff95e79cb1f84c9afc5ec68c59a1753de93de9f45fd5166b7d9d65e0c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1299c2c443e7ee60f838741e8d3271d

    SHA1

    b44c63440ebc20172092474eb9bb2c19c78ae618

    SHA256

    9de318cee014609f2613a6c6db93b5e8e4be3a88e4b75314ce360ae3b28d4f2e

    SHA512

    764d246380834e6c991f0a17f1763b108a5ad9d62f15687a3a5443b5a372443e995c2d9d2186218f794500e53b3792a9041c09b3fcc7a604d229b28a511b631e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57d5b7367045e603caa2e9f76f85114f

    SHA1

    895332d4f6fb7a99702f8245d860c5375aa9d4ff

    SHA256

    60e699ea0efe55df1e785d25b1d13b50514a4ee7bcf7c363c2608197e545d6a1

    SHA512

    3e4a61beac646d0b6ba1b23ff33bc82ba68b402069c47d73870f208f03ed1c190eadab8cb20086511cf66866020708770317c8828390e866c149dd31a69c8cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebce24b48d46923c674d61ca98a54ea7

    SHA1

    b246fb610742d13438342892d20ba297b3007931

    SHA256

    3f7d19cdc41e661a9bf03383c60b7cb6eb0fe533ee02748c7fa95dd35e27e2c9

    SHA512

    27abdf7523732342d6ba3a74b1ded0dcd906783c0fcd458ec139a5d367c0b10cfd7fa8173226da7cd812aa0212bd6caca77b50b9bd6b93b5872691f01c450b1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72c80da3f5b1dae039a3788ec5a4cb0f

    SHA1

    648a7f1b9d99c24b0704e050f9ff4836ab5efd53

    SHA256

    964ec5ac51c93319245ccca7e834858b72dee2170b523311ee4e909d236ab795

    SHA512

    ca3ea270814c92f785cbe7e2234c0b04b72db8f04b9455c759ec4faa30151122b2db134df4c337180035efce1efbfd8fb0bf12bceeaa525d03663e492f26855c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3677d17504e8f72968f358c4b933cddd

    SHA1

    f886a2bb2970d615c597963afe61d8e3b79f75af

    SHA256

    52ce87c3519fb0395bcf4d669b485e2f7067f0c4af19d3f05c430bcd60f014ed

    SHA512

    d0ac67847500c567acb91fd39adee606abc1625f0a97bea5aedad36bbc865eaf7d69e8f60349a85f2e8c8650c1d0ce83829125c60f45ea00ee12388a38be7008

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddd510f1d3a47700312a84aa7043b1b6

    SHA1

    79867d7c7b5c8082ca21ac94ee0dba5fc3a8af77

    SHA256

    48a56a6ffa5144861a244587e06ac3c0bbf20b3bf99247f5094f1cfbfe020b78

    SHA512

    5d368d4f9726a79ba962b26649a322eabe50827750f1a79f8160d8aa16e11041c4fc98ffeec746db0f2f94e9614ce43bb85a97e3703a30970d331c274dfa9e2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    409865025a41909cb8a7e83095df6e9c

    SHA1

    9499ebc2bc567bf9bcea8a70dcf66e6aa1298a9b

    SHA256

    b5393ec72ba609ba0548c46fb2b60f04134571b960385c434383dad70fb4cd16

    SHA512

    e2b6c3da1240f6fde3eb95b7a4d35819785aed98811fc344398e6d1128e4c7bc554629ce027bc90131bf2c49a48b0593c725e2a31a74f525c09fdffc889141a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c9b36511be112bbce9a7415539fc0e3

    SHA1

    b7efed249a5f872d0ca2ba2614187c255a96a5b3

    SHA256

    e780670f4a6c441b5b140e509a7befb0b54c00239dc27be1aeb4cf565e73a938

    SHA512

    69543244802a735dd118b1fbedaf1cc1aea753b15ff6f0bd9dac90a414d889a29165e1438dc2cd7a558730d6e1636e87910d83af10bc21e4831f72d1ae234a3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ebc5b652928f2ce2203e6845f7d67f3

    SHA1

    fd8ed6a8cbb8754da9bd9cf7f1b9833aa7fc7535

    SHA256

    e1d0178d6f0ad2d8f1e61aa97aa799c2bf32e9f2d8da69fb4d565f53f6dd268c

    SHA512

    022a5e4c78dae6e7db19347be731b2dbc8fdd99494e09c219932c309fa71ddde44afa2359675212331970474f815e3c2bc90f276942528ac94073267d1f422f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59dab5249edaf35bbe3f72b09dbd5f43

    SHA1

    e65e0fd4657418fcf44fc0d78334798cc8e2377e

    SHA256

    aeee0e788406604c74e7edad490a78aa9e5a6c1c54904fe078ff35155a31ae40

    SHA512

    a2fabf6b74fb82ef2b7543d3c04eab125d456e624632bb61927af51964b862adaecf7c644edb1c06437fca2a7549be37e101418499ccff9f6c9bff0daca37913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbc4b5d2083f39fd655e9ddd4285e415

    SHA1

    70195fa14341a038a96c2ec57b59c5652882090b

    SHA256

    803126b5a9c63804eb45f5f5ec2c8d5aa4621996d7b69c19d7c8187223db4599

    SHA512

    bcb1e64c9da15b958e11e8c7ac54c72bde0d84783021d2085812734e55f43c77248a6949d7a1665e512de61262144715a24de05e17ca2b0e4d37b053ca3df416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77209416d896f0e887dcbe6666ca80ba

    SHA1

    d99a4ef57d95f94a2b10f63f973e3d1e93f66d54

    SHA256

    9ca08ff2033c9212a6f9734e5af52b6933b7bdd0e238057621a7e6763fc1029e

    SHA512

    e1d3b7598087ba821e0d251ca75fea190425d8aaf5d6808e4a6cf4240a0136772d7ea77cef51d8658f39e5075de76d87ecdfe74665b1f38808320ef3ac711d27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14a34f99d6b9863b90d1ff98d3f3a249

    SHA1

    e17a5b1f2f11c43a8fb39131b5be2708c95a6fd0

    SHA256

    6898116919af0bbe0414625894cf260c337649094c4b74cb416b2fc7a10a08e6

    SHA512

    9c5ed1ed48f7a3e59c5f1f9ab1812b71ee636cc14a5e991423abdd585e3f07794a4ac3b8dbd84202d0f84b12cee38bf8d6fdcd4dcb3fb172977fa41438a05dca

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\yiu0yt6\imagestore.dat

    Filesize

    15KB

    MD5

    431a210b84bb429d7f49a825ffad1bae

    SHA1

    3af1151e1366f00459443ce32eac0f89f573fde1

    SHA256

    8b0a62f8e94e589d3fb359d2f473d310cf1003bff4f11e92e3c01321b2bc28fd

    SHA512

    75af4074fc8a45b9f010711e5522ef5323cd6d17338fa560dafc771728e06dd9cc3c6af2aca8a38293da1dc0ff301696e471881698b5be98b3284a11b1e6405f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F91VN88R\favicon[1].ico

    Filesize

    14KB

    MD5

    f3f70846cad486fc894f0d6145364266

    SHA1

    411564130a3bac81294baa2224a763d5560a954b

    SHA256

    45a9c8e83b8f208dbf4c775b3915396845000263afeef55c05c368d9f5271f4a

    SHA512

    23e6c66bc61c2010f9ae36126f465e472177f513b72d20251131704d9b78d8e0fdd66f384ebdf9c184e94e8acf43347cf25403a60000b31479651f8bd4540681

  • C:\Users\Admin\AppData\Local\Temp\CabB2CD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB2CE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b