Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 21:04

General

  • Target

    db369c702680289031ea7714554a014f_JaffaCakes118.html

  • Size

    342KB

  • MD5

    db369c702680289031ea7714554a014f

  • SHA1

    83e86fbe9a733bc582873fd1df7ac966acc773fc

  • SHA256

    75a4d3bceebc5278ea1842fb8751d34e91700729d4500739bfb8c9c3a43672e9

  • SHA512

    1a6a20f3904463cf87ace1c1106ee6ca40720946f669728e3bb1297dc057d68cdd3bde66d5fd16b848cd6da3aa57a38fab6b31814eaa8909e5ca0a0330127618

  • SSDEEP

    6144:SSsMYod+X3oI+YmsMYod+X3oI+YbsMYod+X3oI+YQ:x5d+X3G5d+X3p5d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db369c702680289031ea7714554a014f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1920
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1920 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0304a0d292c760f1456dd833d3b4ce1

    SHA1

    8f57d9813a8091fa89ddae01bddee240872f91a4

    SHA256

    f27f473979f82c8f4192c6acc6b386f57b85374b9296a1b5f4199303da62a56c

    SHA512

    bcf91866668031df8ef9c040be150e4d9338796e9657222a1a8e113357ac96407564f21a1336362567c8f59ca5b405ff09a88e676629c60318d0ce7f71e92e43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67d2fe0537c811731fca9ba95844ace5

    SHA1

    687cf4473d105000298cb364b692796dff456fcd

    SHA256

    075c375a69299e88eff537cf3de6d92ad3ced9b910dd9d96caa367386270edcd

    SHA512

    0d59c82ecd866be6b0fee1225b2ea879da31ae71b1f5117248c4c2a1b70b9ecadd507fc27eea52e38cb5f60df0de8c3c687bb72e3d6eb461682b6755553d5a74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28cadc7c8920a403a091ce04e8976dea

    SHA1

    e99873e46c08c1812b4987c9018b2e6d230a6bdd

    SHA256

    a980e34b4e789d3e71293617c10bf990fe841bdda12ff794063f453cae2da4cb

    SHA512

    dbf754890d82957d17cd876a5be1bf2ed11cd031dcba8d6d6756caf43e4879d61c71ecc2513a182620953e3030dfd23d98943159ab68ac793a0ba09513252415

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    812a1295a498f973dfa79c3ae67fcdd0

    SHA1

    2f3e73507bc204c940992d238adfda8718249c34

    SHA256

    bbdac44ea004ada67a6193517464093b89751a4a751bb5ed70c6f8f77ef788ba

    SHA512

    db6abef91dfe23076640d2c996f56cfb3c503f7684f79900dab7f277349ea2c4353d5344316e3fd5fccb390f71bad5d062b34d1f32c76cb9672d015e2b1bece9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71f7ee9492db6ee8acac7b5768a82438

    SHA1

    9323d93d81f2b3f3912f173ddaeba35a3c68eb5f

    SHA256

    e71eeeef3e04c6ae7030f7816c77c5a7aaabc407a6b94cac1b492eae0ae19bef

    SHA512

    28791f8ab0d7a758cb1d54f7cdb9be62ef3370bacddf6eee21302ea5fabd451796129b737c38fda9b2dfe11c1e8d2525461f26af50bb72554dadf6ace57ff469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a13940a430de3cccbcb71c61f82c29fa

    SHA1

    e882d91464485cc5eae9e4514bd01680c11b93b5

    SHA256

    bd4c95db743d39e6c17a908116fb1ef99c0d539e4a640e447f92e2be0d4001a2

    SHA512

    c68c0ec43d1a9fdc8d3eed994aa3666d2d62caa084a23ede1e605d7892bffa51e40fc942cd65c2d1fc1cbebc4c3d05311e40d040460503c385e09882eadb4f84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d860fd29cb5aa088925d9c468a3bd167

    SHA1

    e93e0d1e479aafab62359156ad65ad23c4422d65

    SHA256

    62f0be9c40aca929d2e6bd96c899f6dc0e57d3d981d9d30ac356d94fc954ac6f

    SHA512

    86c56d791ac9df1b39bdf8adea329532eda96d62ae0541f6c926d09ce83237f574d06b7136f74892fd0bbc73e5f51c48703140e9fff618680f7f5eee3788863b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a5b6352425a586890902cdbf4af7a18

    SHA1

    82deb01f2f92047f99652db7f9afa69711c60124

    SHA256

    31572e8727e55233cb03279af2a86bf22a8ed6f41d6976468979bf4c176635e9

    SHA512

    683cd8b7b0350559b2b00a040d4a9382ad500a5064a9415a2ba04005f07241abea395e44026388acd29774196a9a57da91098de5697292919216fa32d9c3f2e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00762428e365015018e43f9fef56b34a

    SHA1

    cb96213c3e6e0e010b9db4c2e38674e36f2084eb

    SHA256

    ca5960cff97a4300a8b2c6fbf4b5cd2de41d61d48ad68de01f1dae16a2b910a1

    SHA512

    ea29334c1fb275e6aa1aecd36fd7d0c62621fe639c0f4280865d54f978fd6e033480208bbaf4e284851d190710426b41d6d0f1d0680623ccccd8826d5cec3287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138b57accd1d179a1e5c7e4218bbbd48

    SHA1

    3a1735f142eb70a4166edfc20dd7fbcd0cd7c2c9

    SHA256

    db5b3d438147ff9689ebf3a1e82414b6948329a0ddd582259e735cfed7ccf051

    SHA512

    3e2781b1ddc7df191b64c5f575d63163e443e6c412eae95333b01e20aa1e62f08b34c1daee00b66908c199b3a958bd09891a34e7ad0a56c9555ca5fa92cc05dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc454313e12847adf2dc14e8e6506875

    SHA1

    d1213f5bacb69213f4109ee36de8fa9a6de9097b

    SHA256

    92d36fdce8826c8f30556d7dd4e5ea8b0e15cba1a0642c00374fb6eb0f3d1948

    SHA512

    71e184bb4a12d4fccc7242370a812dab5b99a6328078b93215cd59b79c56b240a863396dd3a18ba3b3c106ebee536ab8356de2f3df3294012521721c96f3b8be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bf87084bd389679411dc78f39a7f15f

    SHA1

    a79e92dc32a1c7907415ebed65ee3de325797515

    SHA256

    89b2062144b91e8abb78f577e6e745da70c55c381bfe79f2a26d49d1d54ba7a4

    SHA512

    ed8b08dc5fb631af608bb2a2c62e9acfe3c42f418a35f46cb7aa9c11ef55e95c6636f4e25b49a43c4120dbf5503d9bc01d69d27d5b8942743c2916fd422b8b80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f9a5e690b331e2a63f347c6cd6b226c

    SHA1

    b518cf1367fafe52efaa84c7bc984895a84960a0

    SHA256

    3b91c5a2a2f6a87610e4c78748896fb89475808bd7f1496a43c1695abda75062

    SHA512

    19b44a01d1c62d41c728ee36c311b1f9231cac75fb975e30df61d0da8a523ea0bb92d24186fa189007827d67f1c4a8de3e014ccbb915ea5334f7c5c28ac414b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0ed50a2eb851e5138ebeee93f0f56f6

    SHA1

    ef5ed7f87c3ec2aff7ee06e727ea46be61098278

    SHA256

    28c7ae7708a39b05a5da8493afb8ea80fdee1bfb39a2a2875b7eefb92a513d4b

    SHA512

    d9ac754c23606be557d3151660651d13e1c887b6d2ba4a557a374bc6afca4015eb896285ca7c860f5e2525985a014a290c099556e9d26e57563dd817454e04de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a83ee2915a2fe8ea717e6c81788ddf01

    SHA1

    be72fb728b414f1a25694b00b7b2d3d1f0989c75

    SHA256

    683517906e76f35e905a88ccaa19b049ea98a6cb55c381f510d206489ff01155

    SHA512

    550bf89e528c85c02fac2f4d4ee91adafd50d45fa93830d58de2cbb3ade080f7a8c2a5c50e461c55ba01a7dc035c9abdf7458ad53b1dd305bf0239a666ea1e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    547189aeccc7a731e29804e6f8de1d57

    SHA1

    95b12a649c12412451f5e9de746a754cb668b6f0

    SHA256

    d0971175effa2b2b05080c9593e35edee8877b29af908823c6c43ad2b44ba57f

    SHA512

    49934c3385f69556807c69c8dc2993fbd19bd156707b6fd7efb56af14c355d05f02489ad00ca00f3d06b02fc63906050759c571a26173d683537a70014303e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17f1b3860e3c98d116331496122199dd

    SHA1

    b851da2e24e9668a0b25b780c3bf59b0082c794e

    SHA256

    5e21ea5fa88061e038f500507e1c220d647b9b3bc6586d350ccc74fb6b805f60

    SHA512

    901e14c34e4e2efe3de8fc80c3abb836074bd5af36325b16c40a5ae3388b6302e9ae23a0a358147faaabecf455221c81e2844a95ef91bee4ab0a8ea860e8049d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c71f21ad3fca0c8f55d30bbb43b367e

    SHA1

    0028cbe069586bf9d391602dbbd79bff65864e80

    SHA256

    9c4a759d331a611c502c945cbc4d35b7711a92da46244a5fb1b2f119cd4f1088

    SHA512

    d55cea2a6baa35aaada2a456d19f7cfc3944e10231d1ea93c52284d3c8f88507adc48bb5833315a9b182306f08771e5c753dfde6d00db18ee151280340dbd3d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2a59eccedd0ec7c8cf91c46c349db74

    SHA1

    dc4ab85bb6de8643ec00133e54b22972ba6f8548

    SHA256

    b0e04153ed9a0920ddeb963f5f3388fd169fcd212104bf4e97d31ce7d89c823d

    SHA512

    a4ffab7b36589cb6f4c0cd95cb811e21b3a3c6a47a449b67b6362e934e6c2c8f902ee8c1a179c6adbf8511181aa81991763b2094406a4de0864b597f699acb64

  • C:\Users\Admin\AppData\Local\Temp\CabB8E6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB985.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b