Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 08:40

General

  • Target

    dfd64fb9d6f302313bd6101b26fadf40_JaffaCakes118.html

  • Size

    68KB

  • MD5

    dfd64fb9d6f302313bd6101b26fadf40

  • SHA1

    753e3a79e79c45367e0a792256dbdba524ec5143

  • SHA256

    204a90555e110194ae3fbe5a51f4e619029a5c25dd161bd533c119a9d68d96b2

  • SHA512

    82b07bbb1ffc4af2736b3c8eeb4035f6c12600ca9f42c43a1b9c7b5ab33db4b37295f1602835cf9fcd08e475c974aab2fff18c86d4a8d839b708cfe4d4d7ee2d

  • SSDEEP

    768:JiqgcMiR3sI2PDDnX0g6SC9IaSmVmeSm4xoTyv1wCZkoTyMdtbBnfBgN8/lboi2h:JQomaSyXSLGTcNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dfd64fb9d6f302313bd6101b26fadf40_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2100 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c0a60faeec3c86395436eeec5e0a4e2

    SHA1

    e13cf599968202930b4273e40f674dcbd940e071

    SHA256

    7a6aef2c4821a45abe24449cc0e8b69ea1da846a86e74fd17d87088bea08679c

    SHA512

    1706cba9a2ef19b8840d9a9b2b572e4ae6966c1cc47ea48d141a5f1bf47dd394f443f66709c1dbac18a3e4566e81b506d611238543d527363b625333987ea0f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ecfda0f45342521fd6a1141dc1ada8c

    SHA1

    5f4207de93b40739b3906991cba09c611d320a2a

    SHA256

    928a77ccea8b72bf4f7d3c45725a1714599421aed9aee825ce42a53ac1fe8016

    SHA512

    2ce4d69dce752a20162b33e4629398d87ea75950f22f68f74ae412bd5ed7ee7e64490e2e0256db585acf50b58fa165e04e6414bed6b0259e41ec7e62043cb947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f258bdc50c41ddb242b3a143b1c1f616

    SHA1

    9d2d14bc6384a4f381042af4027a88666ebe489c

    SHA256

    4909a0f2a7ef5c70fc27943e274755dbbbb5f39b7aab55a1039c4743cfe33467

    SHA512

    c4b5e0c30cb5433fbd656114c67ab4b6f7a34e788a26cf8bdafaad41db4e36ce8161833891d39aa163a87a414032985a2e499dc5c7d364a526b06b52b35f3035

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d0de25438dffa6436478bcd64d5dabc

    SHA1

    485c5488e81af70dd78390d3ec87ef98def094fa

    SHA256

    a800f562c1b9a861462327b33259c7d06708d37a238f4077c8d772d218ab68c6

    SHA512

    51e6110910d56033fcca1ca6e6129876c445f93831ea65d2cf3edccc4be15f08b02bcb16c3f6d5fabf9a34b7dc8a996fce01bbe0f44bfdf6ae9fe604c22f4785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6273c7dfb1bc99d3dfb40fbcbd0ab647

    SHA1

    96ddce36b42ae40cc1f57dde8a269e0d59c215cf

    SHA256

    39befe99e53924a0d7b78ab1bfac0c6564fe62ffa164db1610317136f60648ff

    SHA512

    af9e970c0b6924b99714584becf827d3bdf42d14e095bcea8e1236e36edf4d2eb1c7f06884967b4a8a7ba3cccf2ad6b4f0da53e10d0df9e63da8b09c9a52f407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cf402d33c72d6ab459f47c3eb6574c5

    SHA1

    53fc6d123c45b51ef06c86e209a805e6dfe510b5

    SHA256

    0b42aee5baff0607a28a6c5b90c87cde2f6546dbc2fe23369c4fad9a44efd305

    SHA512

    e26f839dc574675c57005cb623cc53685aa6e6d010bdd5bb59d28800a3f0e38a57655a08a649748a7aca8cdf0e6c8460bac86e981771b90f011e68b82876fa56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e4a024b526356433d938119841749b3

    SHA1

    1e614533820727cea8aa85703f70bd38d6cd5a2b

    SHA256

    1be175720eb7af12d8d10b20e2f0a6823a8c29bb148120d927aa4e7f81b2b324

    SHA512

    c29e6aac478f436929f53c73fed6fea2420b9d4a4c9386d64e05867425982f80af394d9a1527c1f8fc517577c16ed5911d67ffe978a905a8fbc17d901d73862b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    946b73e6c9628100ead87986480d7298

    SHA1

    6015de269bdceada04ddd4f6e70b4dca05ac3f9c

    SHA256

    176791818ac55a13a2fe1ba4cdf673b1eac48e5cc94850d95d7a4ecf132c7e70

    SHA512

    b84bdd3319dff981892a5d6f1f6ceb07cb8113fdb780c06e44928f467834ef0f2fe1ac6ba3605fea508814f859ac92f13a0fe92f77cb98acb7a73f12eb7d2f56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9dae5d99fad69498cdcc6c2693b4d49

    SHA1

    769434d12093b65ee572d914d5058b719cc74d5d

    SHA256

    94fe00f374a4ee7e1dc7f3fd4858ff6d150b0f3cc819f52a968e4ddd17d781a9

    SHA512

    f57e69d7841185d5d0c25d097d20dfa989d891b01a38e05141c20225eb1455f538b572b7a9bb77734dda5ebe5eaa307b7d17a17ed5f4fb3a20d237c07cb05f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f00fe7a4a1f7727ea445c7eb2dc43e5

    SHA1

    c384e88ccb3de2c9a790bdbf6af1f3d765d32c30

    SHA256

    62b5b1a0f229062da5d7f11b1d09ae8cd6e3c8cc68d89b3cacf8acb3b4579228

    SHA512

    6b53bbfdb47de721bdb107f10c1959baba69e71f4efbc422de9d9a131931190ca884c5e3c588fe7b14c6775f0c2e5bba9fa4c75088b18d892f5bf355d7e071ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4850f547620a6f9a0f8895c45e34ef9c

    SHA1

    0485027320ce3530ff920b7a81575d1308b69f80

    SHA256

    5942af669d8dc685461c4ff983db31787aabe299d5ef64dd83999b706880fa5d

    SHA512

    44580f27989b9a75bd26f360c6509569ff089b81bc1c120abdaa9a252fb06d06d54dd9a1e4aa08c03b3d1b2a126870f123d14858739db5035aa5ef195ef0bf98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bd8a49089a7bd3b0f70d2531b5ee522

    SHA1

    a9c2ae1c0d8c00ed092e0214307980c090683b84

    SHA256

    8bc871e9633291e489916a4f8cd09dd9465255d624b654c798b96f8c32382ef6

    SHA512

    b63422febc607223b754de149b3491717308aeb74d5f8d9c914f7f62b168c5f54c6f8f7b0342c3caa7985bac5eb781329a14f5861837f04188c9f1eb62f45b6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bf7733f18ae36c6635f922249bd6dac

    SHA1

    091c2c86fbdf6f720f5ffdc323ec90957fcb37b1

    SHA256

    0e06dba1430fb54efefbb50d36fe3c68b99e438c46157fcd4bc9ac5644e38167

    SHA512

    92111c7b7e20e255076ac68416c2c643440a24a8c09b0032bbc3916773453fcbd5a5d397e19d62db6c05f3e0b7d21cc5480cc21fd2ecb6bafa1c8609c81895bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5854d366176dbe6f5bd403ec64f5de25

    SHA1

    57da36cecbe6845e22e0e5b784f645143628d4bb

    SHA256

    20d8d9a2ce5130ce196710125d3f5d53cd922935c214fbe06e5a0ecbef45d966

    SHA512

    a8d6b7a6b23b12720204beccd8684693d0aac7e4c87e50c9c5fad1914e6bc4a4658e56ceeaa556c0cdfa9bc4962dafe091c85e8a0a4b152ee5e9725efd6f36af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733e50ae446ca4b05c8ade623096315d

    SHA1

    c35754502060eab218bb6c52a209b00262a300ff

    SHA256

    006fdcdc4d3756898968f3b4ae72659521a3d4808b8c773ecc03b447c63a46aa

    SHA512

    feff70ce3402df8bc47f67c3f35e576c31a9dde13e040a05b71c7aaf74bc368aa43ecd66555c9bd68fc1be9127f048430cad03c492caa4ebb58b46b3c998a7fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac1df0593426f4b88a0486face0d0a28

    SHA1

    6d38b4cad05a2c638ea1fa63c1c3a759a2282f47

    SHA256

    be5b4f3274ef7480de907e382f23143a8f82c6bb32df28ba660611210449104e

    SHA512

    5add90a0bd41f34b4d1a193965b7e4a2733e11c1f29f122d8a98cb28332587f210f3fb3f0a03cb5afce5182406ec4aef1b8e3dd99833d5b40f3410a3cc94f11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5666826f6e15bf9d55c950fdac4da48

    SHA1

    f3ec6a580c9d093a04f881dbba23a4134269b5c4

    SHA256

    eb1428ef64a14d1994ddb16c204b92f3829d960cfa2b17ac0aa07a5e55414a44

    SHA512

    f61c3df8bfdb0071499726a07c33754ac793f5a433d47b300b266525d3910314a846825f0354de44a32da889b493e5a06f132607e757cf90575a66aabba415a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6016774071811290af83bf68addaf919

    SHA1

    058a2f81ce53509f6ff904f9ff0b2158800c5d21

    SHA256

    3aa1054889a4f533c8e9d3c4ef66fe1ca4dbc79dcff30b9db69a34ac57a1e1e2

    SHA512

    7436fcfda551ca3dae70880914444fd43e3d7540f497e46c3db3267a3b5831b9c1b5fccaaa3f8b28c54363af810810e7a4665d6898b46cacf25b740c1a4f6fda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17b9e1093dfd05c72fd3a8961ac561c0

    SHA1

    e9e8a366659fd500000858d5d40f04ede139887e

    SHA256

    c34a08911cac2f91b99ea9dab96a25079aeef91478e34e35df46ee116b55ad82

    SHA512

    029aa68f5dbea175fa69288ab3e25480fa186faa73d98026b790bb54a93832b8f6f46011f6ef79a24015181d6beec47ab7e5f74cd5cc2a0d991bafd516242b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c61ce788eb344fcd236a4a96fedbad35

    SHA1

    71c7b4e21278010e7210bb792ef4ca764762fe00

    SHA256

    e360db5cc01e727f1717bec49912af84ca396b9d7f1a3983b2c5ce807af0ec37

    SHA512

    f467e1af53c2700c216848c16e3bcf6b6243e52a7ee493699c4fc2fa899bf414a43863c93b4a13f1cc8b73318b64620c8701418cf0dc0b02f9cd8317d8525318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cb23eedbdfd397e0a09c0e66270a509

    SHA1

    3aca7ee87e105c02cec098760703c7792854317a

    SHA256

    262b81cfbf415f38cdb74ddb54b86d43688476707c420f50665e289776265e70

    SHA512

    24088953fdd85191119da54e76d52e8fdae05127aff5e9e7826330762eb20a4607dc333ad5b70b1bb3a4aa01570b79f700d86127f230495719cf8065a18323b0

  • C:\Users\Admin\AppData\Local\Temp\CabA7D5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA847.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b