Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 17:16

General

  • Target

    de8e1e82ea04b964d35f97f63cd8885d_JaffaCakes118.html

  • Size

    31KB

  • MD5

    de8e1e82ea04b964d35f97f63cd8885d

  • SHA1

    84f10e4b942b9f611e2ad8dd5fa35410813588ba

  • SHA256

    4985487dc4ee712822902bf699d36d51b78946d893731b90dbb5697273ffe37b

  • SHA512

    69f3a3df70468b9963db6ae055a04d0c64a80975acf7e5066d20f29787b3390ef3821aa79fb4a681e167432886e54696cad4ff0d059acbd75459982bf85e8ea6

  • SSDEEP

    768:yWSYeK4CnMtu//odHLoA55MWEL4v0OVt2S4f:yWSYLZnMtuHodroAn7EL4MOVs

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\de8e1e82ea04b964d35f97f63cd8885d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1092
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1092 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2268

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7e419e9e37e5193e2e7508ea196fb4f8

    SHA1

    8550afc1ae2e80e1f6d3b9c761a39ba7b110b80e

    SHA256

    1a5673ea8cc57750c9638a4c2b5ef56504e76c07e3c02081b50f7b626b71a00b

    SHA512

    ffc1f3081cc74a2507f14eed2c3f81985fa484629f8b26f7015bbf45faca2bf596d501ede3f7308266ea54163d28a92c6e40f985cd0f50cf9c50c23be9d06faa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8affb83a6f15b7220aad476ad014908e

    SHA1

    65fae936b21ec7a135bb9a77d70b86cf18ea3817

    SHA256

    94c4fc71acdd9f9d4d919fe29ea36598a7c9a0c3198f83f0707ed2b51ecfb08f

    SHA512

    4e7be6f377ffa373bcddba10c0fa5bc09bbc0cb05f514e2a4175997d2f05497ddcab0fc9ec63fe4bceb7938173099e0770f8873444c05cbce3f0ef1e1b6ef2c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9332f9a8def75b87c0219cbd7f75ac8e

    SHA1

    ede550d8f0b2f0da339f97186d181ddc21ee21bc

    SHA256

    5549bff886ad385b96d1c937a4b5d56a1015ed40935b22e2cd0307b46d262834

    SHA512

    37e6802ac1e99d90c016e44fb15ea13fddf3b451153b59048f69a1b6327ce0e4b485413ef1e7cd606e382724d234c332dfa226bd7e0eb696721927c095c2acf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d6b8a6fa2aa1937f431cd6d69dd228

    SHA1

    3999030b79a263d7dff76aeae3ae45d2a032c9a2

    SHA256

    0c5610d65b411393e2299896fc5aedad483a05ac69a158cd44115afda732dac9

    SHA512

    593e347f3e37832508292abbb3087f661113bad634d2aae20c37562369d6ee32226b2d448410c3544328362e08390fea5002f05b602e61574163c80ea0efc745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fae633726c95a1f02c03206bdd642f4b

    SHA1

    a7afcbe009381afeed265a515fa83317ddf9ef08

    SHA256

    828715f8a94a23903bdc9c96bdf1faf6006fc7eb40d34e696c093feea6e95614

    SHA512

    55989148d03e0bc49ca0d649df6572ab8b941b3d1dec9606bbdf1e8e384e2948109721efe3a2fd464574d9ff2a5664e10662466e65c7b94e4f361bd2792adae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c19e7f3556149beaa8f55b9d421a04a

    SHA1

    888a6900566d32c2af2a48a7b0c00f2bbc95ab02

    SHA256

    5d102766df5ff9071b2ccc0bf35704183752238f7de572b2e12f08a0bbce2a56

    SHA512

    5ee3133a7de93123f381958a6ddfd4c9466bed2c5536f9afc890a8895e42f5a05b220beb59cb0eb92dc10ae1a3c6fc535c84ff815457f88798e69499a6faf89e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    125e4111f304cf271861624d345a7640

    SHA1

    cb3fb772d632edf475cd59b44c7c57d75f4538ed

    SHA256

    17cd6f0f61c3d95b08217dcf5f0f794b9d6be9ea8d9fead4079ad237f0963518

    SHA512

    a5574a043eea41189ed9ca6eb0762e8d80ff4c16801836dd7be60c0b0fd78427d7a209ac3358d2f6092f66a15878a6370d192c99c873e63d8b7d30e36a36eb1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5686c92561075e77d0fe34dca1632c70

    SHA1

    8c519899489f2a2fe80292a1eae3ab5f84723529

    SHA256

    a455af88a32bb4229d79619d373200684a3ef026b203f83282ad5dfc394d7cc1

    SHA512

    d4368de264a6e587c461066ae2bf11ef281e33ad27587c78d8ae6f45476065089f001758e15ecf3bce6acbd7ccc989dc297a52efd720c00fa5809277a584d598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd3b5ebc06dbbdfffbb29541d2c7e154

    SHA1

    fdc4a363242fdbcf3b1f782a1da22822e72502a5

    SHA256

    95bc54e7130a22081bbff46984220c966d53447ffabbf806255339fee92edc39

    SHA512

    369976fa46b6c6260896c6a1a12484e8eb449453069e4d5c7ed7f4a0ced09795797ea8735c5ba433229e5db556a025520707a042b9f409875105ff10b0397f3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc51692fb7d41d11c6bf7acb8cc0e713

    SHA1

    2ccf19b1f264074f7962c51537fcc7c975b6ccd4

    SHA256

    335a3e8a8e74780cd3091e733f885bfa305cd452c0fcb5cd91eb0168c7fc636a

    SHA512

    24159bf42a52f9e17246d6cfc2da0e88ea7e0f0d1587c2a5ea86d7af8006093321bf16d0dc63c02b4fec88fac48b68270e5bccccc8676d50078d619e64db69de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4f6f71470e445d1d8cfc2b02157ae3d

    SHA1

    a50b35a756242982883611c7546235e57069f6cd

    SHA256

    e625f4e13fce63db1cba4d49af0657b49f363503c93a4be0f2d514cf937aae64

    SHA512

    66025f4e31a6fec87e22140564ae59e7c592e05785a0af22dc83c84701a43fe3fd4876ce0d62ed684789f40235bd1b3ffbe29513ed76c7876048136232f00d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    308efdeed9282630b41301d97a7cf92f

    SHA1

    9e9a9e1c7ada71666e0d0063792ebdb9908f2bfa

    SHA256

    2a75f7832f65e6ca54b423255fb594b1e310e0aa1945bf8a1e2f9a65cd38e6ed

    SHA512

    cca50156e85176d71709911385410853389283332176376281ece41af4545f427768e9c39cac33ea163e891d870ee87ac3454c358cb39a81bfb7c9e6d60517a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c9d61b91621c304e5b62ab86d7b96b7

    SHA1

    e567eb0591f49d1681a3a27623e9061c3e7c099c

    SHA256

    bd2df7264ea76b1b1fa3d572f7a61ca163bfd721a309584a48acb9af958ff323

    SHA512

    4e2e5faf302c205b87205a96a220eb4052cc1649b02c4c0173f27e15b13e2f714fc9a5405fa75237f33e468c953c107c6d3563cd4bcf0f1b05270e97120ceba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c31bbd8f5846ba0c26d6ec4fea8071f0

    SHA1

    e5dac8c612ed6b389ee5ada0dbd3a45eb8012085

    SHA256

    e40e8eb7a38c8139d72e27a12836e5c156659c98f5752f8634a5b727788e2c03

    SHA512

    f2485eca9ee20dd60b52c5bdff0fc99c780786424f336619e80c5c4909d4024d0fcbc37ff0ebc2c234e940fe117c50604ee7133de08637b661ad3ee38a871b39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82b2925a9fb865255f501cecfc6d6493

    SHA1

    90568421d708a44d154e7979ba5317534364bfae

    SHA256

    c4aad4bf3a32bbc25c10ca9d055dc9444b3b178cb8e782f86637deb9f3589af6

    SHA512

    9088a81c4d93f0952ac4e46a2c1f57fb81e58573f5b835d2acfcee4557bccb8b8d8a2e4c0c3c8bc3616afce31af231fde039799bc1dcbba92ee391fcce80fb37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc6d8816ff53bab5a2360ac4e15c289

    SHA1

    fa6958fe5728fff47ec47bee7f8fbe6584d1f5a5

    SHA256

    fb3ce1f56be3b493e6335d4d996890816cb0b6e17751bc7c111cc5e71f806ef6

    SHA512

    3c585a324b9140d75920613f269300a6cdabcb590e3020ebe059538d94cae4addc770463a5dc12ff1135399256411ba5d0551cef57a272aec3d11aa7a50d8819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a148928ae13fabae447df05b6a4278c9

    SHA1

    61c5ce85072b4d7547ce59e1165d095b7143e724

    SHA256

    2ab40732e4782f618344c7d8dd04f6a6daecce48ee1e9eac00d9dada9c6efcc8

    SHA512

    ae54506fa1544bcfeb91b7846470d5de5178324fc458dd91d0547e1a74405eeba482e871dee742e0584f09686e2b2126e11c17e41f37bf45e085c326c69a4888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e0c643ec2456ca43f3dbed1ca5ae3f0

    SHA1

    249adc2b5e4d46efb00db76636130d67b9995ab8

    SHA256

    8483118aca1a0957740a8d8dc326e57d674ce69bb36b7a8f3ae511ac42471ab3

    SHA512

    a143187205a86dc5f7678937788e9438a6ed85771a17683851b5127c2a84b40919a768e96b93c8b27703fdeadb57f3033886aa9a918eed87f3a733d8ccc6b4c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    123ab48c120b0cae5cae134c8293f8fc

    SHA1

    7723a0b1069131456cde8a7b0a00c2ae0e37380f

    SHA256

    a3a213ef1f1a8e79cec88aabd581be6cb24e41b07f9b9c509e3c8a6c908aa63d

    SHA512

    99264141044ce907550ca5189fe052cc06baab68aa6159495d45f78000e1d098bbfd15877216b1ad9ff00f43b1d4f02d1438614d1bad3a533fa8772dd1e95b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    169b7cdc510bc6a9c4368fd39d00eafd

    SHA1

    c77d5f738a6e927ca82894ba898287a8bebde693

    SHA256

    dc0db61ad18b9add4cee36dc61522017edeb179f2572f5be9aa81f0e6573901d

    SHA512

    24e4c27d945c0d06c08de53f93d9d1d7fa6606a8a9bcea1194a4ad6d59fe907cffc4e03eaebb01c789b4a7880a70a6078e2c57dc4f65b195b06c4780ced19e81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3101ccb08a3cb0c3d1a8bedddecd5035

    SHA1

    68f0c505f328b2b1db75d29b6793324df2f8614b

    SHA256

    d7626af4237a7614b47dd9955c60443c3a7c509cab07d5ae1992761ef357f351

    SHA512

    76422cf7cc73c86d22330095a569daad8987d2328d46c064bd7b25b86724e7342f8dd977ac8f4046286df28cf59ef2fa6e86b253942e1febd1b31d1cb04e35b4

  • C:\Users\Admin\AppData\Local\Temp\CabCAFE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCB01.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b