Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 20:14

General

  • Target

    db246fd7e200554ba0b6b5f077cef311_JaffaCakes118.html

  • Size

    460KB

  • MD5

    db246fd7e200554ba0b6b5f077cef311

  • SHA1

    5b2a7ad12ba5da4a85eb9fdff0c2bda508244026

  • SHA256

    b72a45ac46cfdf38c3149b0573bcbf1d8d908d355ba23f3048a0c2714ff3dc6f

  • SHA512

    5ba42e57c525ec8c1991a51ef274a2e6bb7e470b8fb77b478e33d6acf59efa38296e434f739cf3df3b1364cbb5648dbc1bd32d08954deabf963376dd9719b3d1

  • SSDEEP

    6144:SKsMYod+X3oI+Yt3sMYod+X3oI+YrsMYod+X3oI+YLsMYod+X3oI+YQ:n5d+X335d+X3l5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db246fd7e200554ba0b6b5f077cef311_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2709bde32e93c8d539c8476dfbd76493

    SHA1

    d06286849412cca8d4d0d72fc51f81fc7838d6af

    SHA256

    ace6f172d54bc649c089ccb6aecfd9853793c6240ccc8b8ad53aaa45e107ef4f

    SHA512

    e29b1c9c018d89227edfb4de11d10f8e0e008bbe9064f12092269bf058fd7870856f8fbf649a1874bdf6b8ad22f3ab1a6bdc131ff52f54877c259b7e4d8d4e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e10ca7f7ceaea5df9771ae8d0e31b54f

    SHA1

    7e3ae540d3a192c31fc8f8a666294720067091ae

    SHA256

    3cf46efd0e4c1b9492bc7ddce3b9d0a544589a71fce3ccf4988c46e1852cb312

    SHA512

    bb2a7ad86760623d523aa973121de6b107674131d74f42a7f7c8653e227535d3e9b4acc7e6c7aad83caa0f13a3c6b89abfdcfe837fb3f76784e485e0574ff062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc4c26bc1c23c0ef2303e9c076c9fd17

    SHA1

    042873a276799f00935682b6217bc0810b913100

    SHA256

    076d81a35dbf55466faa5a33dd48102725cbf92517ed016410e5027a55c4adc9

    SHA512

    7a2d06c2c8ea7745514565640ab86a260df83212d12bc480d290bcae60911f8301b3a404a6d664f296bfca19ceaef0c1263a61430947a483d111f6ee64d87f42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30e864fcdbb635085adfb3f36cb5f57e

    SHA1

    76183261dcce584a709268d1260d407faf56688b

    SHA256

    e26cf7300562d22f77a5b2cdb76c783e882f75fcf1cb7e0c5e9ab20e9f5f7a67

    SHA512

    f933e382843a948ce4aef4c10a1eed28d17718235c439a543538bc424cb3debee0cf57dbdfe9e4d4278b2e9f7c5dea206d7b24be4a9f4c6766524a685dc4af5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a6798875b1d666badb63d7df17c774e

    SHA1

    1aef3f91fa6b984d1fcec3018d8a8610c1e7431a

    SHA256

    11b431cb53d48967a68a0e2130d1ea95b79092576f289438eb3fdfa81f016c93

    SHA512

    19fbc3f8d2a35f10cb65fd8974830ff7da54827c53ff3c50ec73300960079f31142f34703c7e98b3c0eaaa5113a48794efef6a83d3148d6d3cad6f2d839aedec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edab222f53576fb914d2205e4f70aa32

    SHA1

    6d2950a8f938408f3dd25776d8c25e1ced14d7cf

    SHA256

    e3907ce6d290df2dcf2162cd2ec48caa6737fb180b27dcd14faf7b8f027a2cc8

    SHA512

    8d1f97f7ffd97e88a3003764ba664d91a440c2dbd1c84423a4cc3ca05e7a178253d9ab684cb856c4a125e853d5abc12317aa5cb378f74d45a6918b14057f2599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34bb19a478998b9f598bfd9562e466a6

    SHA1

    a5ef3451358d3fef0eabe252f8b5ebc48ab6911a

    SHA256

    0cbebf2c8def26a0a377c6425bef0de0bc00244b7e6c27ab129611f56c81f72e

    SHA512

    2e66bc5c4bb86f49be4d9414a5da625dde4f8c5f93956e0e58104c259276a840ac8a89526cd6455f3f452235628b184269d47a336db174cba5cf571f3c31220b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9501c7047d164b73548d428e55a438d3

    SHA1

    06b7938ff1bdff81ce9076194cfd954a21b8b512

    SHA256

    c6f3a452cdb4bce6d7a88437373c187e731638cc40164264b7cb14dda90e84aa

    SHA512

    8c4c3ee1a939b2cfd67a0e657b264c46e28b4f676aee28558ff4a4f0702580863b911c9a7fea32a0898d568534f926e9ad683999f67d704bb7dc60440e2998d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    758e233502d0d6c1074d4480042b28e5

    SHA1

    2464b185d9a1a93a0662cbbf4ade2b70917a842b

    SHA256

    f3535c5fa2000250f83efe67218c944910854a274a12f5016ec053e1ac24b2b9

    SHA512

    4ed2e13ec2173da85b6134341235db25f9b3d3cea618e188e0a8e50308df751717334c552222afadb7791f2bb3dfebf55467607e59eb5e502fc061880c6e3843

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c73ecb50d4ce47166acd7dedc1aa6d8

    SHA1

    dfa31b20d2270a0b427e83d10e72a6a7905431f0

    SHA256

    bab42739df2adeceb4d6b92be9b2920fdd482414810df2a8ea7b10ea948a6188

    SHA512

    94fddcdb73fe68888d780b1026175410fcd2e7b101c1e0b23560b97924133da1f96dd5162e4f319812eb2bb3b159fb95b86eb745197f7d3e8fa5bc8afc7fd274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fa484a80aa0c1be08d78cf124301e92

    SHA1

    c98fff63f24a443dfdb08703764b5f8dd515eaf1

    SHA256

    54da02febc39424504a99fd7c517d7d1efc7b5e3c4552b2bf4888841334a4a18

    SHA512

    33ba72a287d234a3e2f69d64dc37b6a065da24777d3eeba2b71df4f71f576bc108fabe37a44f9be4d03da9a9a68402524c187dbff7a992a8a27cd777021eeaa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf9af185f3224cfb5d637b892ce0123d

    SHA1

    c863d80a129e3fae499b6802f0339e18ec1ae91b

    SHA256

    d6fc74ff3b4d8b357d9d6d7744268fb27fc4a6d1f6b0ab0539380aa1ab261852

    SHA512

    fad70c5e35fb19828200223251015aa26d1202e7cad18bc30e6b3339e3da710a998afcc9d5a6f9b94e33738534c0fc6a6f1f7acc3ec4ff8840c6ea67f550adc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03f8a45fa81ebc49b60f5784eb49f68a

    SHA1

    c22f943503af76a034668e218f99cd343679c34a

    SHA256

    69aa990ec8b821d9bb3aca43b57417e917b7219c7b23d866473a385a26c63897

    SHA512

    6bebeeeb2a4f98bf5a5a140008205ea18fa0e407dc617d749ac5adf40a06b88ebbc0e288221af862d2b7fc68bfae69d7b9a929e257223420b2d7c154b11c2e7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dce5979f2d7fe83476c1dfb925dd17a

    SHA1

    f1116d113f495f318f99987421c80a36d8d2f801

    SHA256

    696d9a7f968361d98a711e15c02cf041b0c71db3293e8851ab564e6e8b5f044f

    SHA512

    b025f366a5a2ea27270db355df0c98566b28a5acd1c3f6bfd69c45b1a9d8c96acefc2a1952c2eb3fef6f9beed8bc8fe7b75af47eefa4757cd425bb400a5bc322

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44c3ecf50e1d2f6846ecfaf1118e0b5c

    SHA1

    0dff1deaa2ca8844a367374b117789b79299b905

    SHA256

    77e55dca7c7ee6c514c1881f73039fdff18f7358e2157addf96cb36c266db163

    SHA512

    a01e3baa02adab15169caf7af70864368e0c9b7fedf5c922c37f99519ecb69374e5ad55c78cadbbad3ec716411e03f76b5b421bad93d4719648e3206948fa83e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8ab761795727d945541612e4a736e53

    SHA1

    211f465df64c994500fe171df85f79d731a0bfac

    SHA256

    9fcde82aa8701c7c4dd3ebfc8ea804d45ea1eff8664000a34d177df5ec47f77c

    SHA512

    7c9887b9a581cdbb6e353bbbb43271f567bbc3a1f1c47a4678e751874bd3783b49e4c946353a71e8477fcb9a0ff98b18cf2f7214c0d9202b81a417b50083e997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c25d60387310a34cbe4ab74bfab4c0c4

    SHA1

    fba19349226f87a04fce853abd8ef3c2d85f699c

    SHA256

    f801bc4e9f116f7bd5d174812453a43d26e883bb949468a4b8eb2cffc10b64d8

    SHA512

    8dd8bb206a399ef5340a04fef45ffb1e306d73377ef776c5541c8b542f800ef5d28dd7cbc39c908bf2ba73673e115f21b194270075a6eb0b6c3b0a0450ebd1c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9503e41d0bedc51e74f1075901e1815

    SHA1

    b0a1d9c142098bdd04d15a5c37b41812721f46eb

    SHA256

    160942b8cbddd33e7479861c1a5cfef25d98524c44ec44f83321ba01ea609c88

    SHA512

    b5424518b5e758a17f0e86a93a207cfb4a41999f90a0e393200d70cc3c44c657b41942dcd67b793e4f7ffa22d723fe388a7cdeec12cd0dd713c8c921c6e2e723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10f887e5a2417a3b6bf9f17ed46da32a

    SHA1

    a72d8aa939be4c1cd5dad2cc51a28bba4a9d7bbb

    SHA256

    1de4cde435a17a9f62d63d7cf27ef5d21c3aa849510d1d93e41c97ef1083cfea

    SHA512

    d886883d9efa71af7beef4371b4ef5807f9c00f5de155db7722c6ffa0ae1b6de97c045d7790cdbca5a3483a30d9e228577782579be7eaa959d8464b64be98915

  • C:\Users\Admin\AppData\Local\Temp\Cab11FE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1270.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b