Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 14:50

General

  • Target

    e069d613eaedea71cf1f71e02b1a949a_JaffaCakes118.html

  • Size

    19KB

  • MD5

    e069d613eaedea71cf1f71e02b1a949a

  • SHA1

    c5dc80d3c6244a3625863025d8055ccffb882ac8

  • SHA256

    59dc122d73317e0b9ff0c9d01eb83105953ec0ac702c746f8fce2cac9284d009

  • SHA512

    782dfd64821fc4da49aabd80891e87705f4ce2d698a51df64eeb8f0aabe0074fa746da5a2584d44a14cd33b40b9ded33747c1665c080cefbe2644217450f2399

  • SSDEEP

    384:4+QfPFd9QZBC7mOdM4QtKfpC5IgSnbmFe7Acrm6SbLAPd:Zcd9QZBC7mOdM4ppC5I9nC4/Pd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e069d613eaedea71cf1f71e02b1a949a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1076 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35f33a334ac7a245a3f05572d40ba84e

    SHA1

    72f7e5d6b323ee57c72623d65562928198ecf992

    SHA256

    03c52cc0287db6a5c06cb26a86787df334cd877ccc745c761d8d7adfcb4e4ab5

    SHA512

    37d9eef33985915a4da4ed403e5bc261e968c971d6cc419690a4c2d030679b50293c6d24bb2c86feba59007d0c5443bf2ba82e114b2b1c6807305ff85bc0a796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    572cc5f325c99bbcd8ef049eeb7fc02a

    SHA1

    0a07b7d5b685fcc96ff46c50a3dca35d62c72d63

    SHA256

    3cff7764f323a4d30975753a3418b631030e01c0a114ef0c1be2aa3c7afe24f3

    SHA512

    37719c544f3e5a2938761d62e7ce4a17c0e1e296e25a93c74adebce19e4c78a1a3b18c55e9e962c8a9c0bea4a5546a84931fabdc6083280d9e011000983152d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3e545554f8a5ccf966319fe571f8e5c

    SHA1

    6efe68877b132eb475be586f8a9567241a69149a

    SHA256

    ac872136ac45e0cd33ff8211893dd023e68427e3529bd473fa48ce2b47ba05d4

    SHA512

    02bfb0643f72b3814185dd5b14c19b1d18939a9208c001f4374de03b46d2eb82cc7fa7324cf6f01f81c32bf73489574f5a349ef1d63dfc82d0559f3d8cee8089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bcbda11cedcf320e0669188661aa313

    SHA1

    30d00f56e3d7d853f9d152ce0f972718c134dc73

    SHA256

    dabdee41f730697be1d119b27361124285c84f10095b75ebf94f90a1ff1cf463

    SHA512

    dc32e5f8e1f513b221fb64ed56b6c128082a5755d3ebc1a0c973558a8465ff0254e49a2a668a9b77a7c20459325721fd21d2adac1b69852cb4746fe533c731a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e684d066c092b5fe1f5217a9c866caf

    SHA1

    dec2683ea649b26fe1faa64109ec8285dec12133

    SHA256

    17b3d4e659e00b94e6497679b5356b3a7dc4aab6fe8803192799f7719197c632

    SHA512

    06dbd5ea4aca65db40ca0c19cb3d1bdc48dc4a21e03d5ec7e9d4480eee2b10a3a656965332cc9df0f2decb16a853720baa3faaff8851e595caa55dfdf3936d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba9ef5662e26bb0495c580309339dbfd

    SHA1

    dc667789be12b430b3966b4718b8f2d324ca64c6

    SHA256

    e053245db90756cb37eb8fef5f9f68bf616b0aa0c4eb95e6c5c07ca1a58b5a39

    SHA512

    2446c11aaa01f2ca645d64f3eee0e1aca3bf65147e61ab4b3e039bef34b4d3c1d0b0b00933fb3f867f0eee7a14b7880b8b94aac1e2bf07793a648d3d9d1db31e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fa7a8d9878ff06bf292b0a56144741f

    SHA1

    c7ea11177592092e1895e3cebb0edee282527719

    SHA256

    7d76a6b8d6c501a6a8289137c7392d2018384842cd2b5fe910468725992bcb9f

    SHA512

    7114aeca1ec633b6b44842001c6dcc9477f1d0918872cee4af8744a4117ad93e6b99053dcd7979a078206f25190a3c3d08b1822fead349dad5890c20d2a7b04d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73a7233848fc3b6222f657f8ae73dd4b

    SHA1

    a0f0f8010352c087a3d7dab4f09b9e0b54c8d8db

    SHA256

    9350696f0a06494df6e0321f82cf5184b22f13c860dc2a6a6e6c48097d499305

    SHA512

    b29574c2e660c093120dc8b01b9117829184234aede305b66cfb005f2b1c3800d99f5b00e66d16e259c10c06751a6ac3baab473db157d2a7744e55370fc64e4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef953f92a3082c220839e3db18f4ab2b

    SHA1

    5370fecb3216586a442bfb0a6401dd614c8ab26f

    SHA256

    ecb7574ad7a12c48477b0430652df72a40f66db0e909dd29a0de29310b353a0b

    SHA512

    d01ad2de2204f481332b9953c8615f14f544ef60ce8a5392a0ac05c716785d317ad93a350d0d54185d347626e9d30740a546773b37e85a8016e681c562f5fbdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    578434258e7201998a82e40980060a62

    SHA1

    a1a8985d3fc650f257f2df782ae9543dad6b3813

    SHA256

    d75673afc4d7b01759a7b0494eca5992d2e8e56f049a2767e01f5333b5e11caa

    SHA512

    1370dea6b13b2116d4cd032a60d0d29bbc9462098ee3602f229e45641925e17eb890b24e74069521c0dcb2807d0510e86740d96668b5e572ad1dc3cf93d2ab37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    139c2d575827b7abb74e268753636281

    SHA1

    8c8aacec38c94cebac46246dbe1e4d982c3a431d

    SHA256

    6fd89e3d2707e71ff3b4233eeb1d4cc8847f1acfffea8859aef6e17acb45e171

    SHA512

    853caca34369879e5f7742d71f5e2bd8b6117c67caef69976608a7c0e1e7b78b041a5b5cf87f35d70b02df606e65b5e3ce55cdbe9c2ae54b471d899dbf3643cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8007263c16f4a6b13cc85b7f90e13873

    SHA1

    a09592da7358089edd441ff5b278861518eab255

    SHA256

    c0fc1fbd349a0577ce95af2d2dea47dbe2d69f1dca0defe331d3b0cdc85fdaaf

    SHA512

    3bd23b1269163444d28e167107b7c165566ad1a611d370b720fe4b082f1a7c814b18442d5117567dda53e793ef2587679d011694ab950f2d1b9a3e0dd6152df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15325651799264fc70c716fb087d226e

    SHA1

    8ec61061cc913f682a3e711e6747cd21ddc0dd91

    SHA256

    a356ce557627fcbf8687779c9134120747b46ba7f25b7cfe52a50ded13199834

    SHA512

    e3d21eaa9f3ac8b5e896abad951fde174b6ac5dd67f5c239a35f1490aba86df12f5f95d34ae2917fa47cde5d6b5a13d63e1c7cb9d9c530a63904dda56c774937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d52759174b70eb35e5c7b1e4fd0a23c

    SHA1

    a31741ff3c5ee0201f63290de1f85e1991d89614

    SHA256

    0b7651046d6c3e0dcd29bc43559114b72f99a94ba82e1d17fb4ed9555a6f6769

    SHA512

    767c7fab493e3e1d46971796da234085f95612ffcfd7f8f4d42074dcf54757536ff06d3f9416f3b91ffef2a5e8ac2fc4e7e9adc9ec59ea3ccd1b2908a1eac5fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7358c5dc0d5df6a399c18c8fef75f80e

    SHA1

    1cd7a0a540c35ac3c725df2760f48f84c22d6c8f

    SHA256

    9130a89756097ba26670284808095639392b29dc8907d870a19971aba2fe353d

    SHA512

    2ce111c0d4eff6e53d5825730b85e66634799c52cea6a8eb9c9779ecf502a4b908232bc7e3a862adc130cc6efe9b3a20ae08d1111addf80a58b51b1124ef84c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d216963c1c7d62a860fc4813a97e70f5

    SHA1

    377bc1ce8cd037fbbbdab4dd5fec508f9e88fa19

    SHA256

    c74e63ce4acc4e90626781ae9a6c86acc57f5fb843d64032a8bff0c853000d7f

    SHA512

    8a4d5856f242db368aed9b4b5b222c181506b506aa9ddd51b9a0decb6ee5ab08de1041a3d150af6f83a120b672702da80ec6b1d063d818baab6ad84e7cff06d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    821792f7cad67e4e6c73aeee4a096ac7

    SHA1

    50f36d1a56ad1fde84d0bff2288c54c95ac94aed

    SHA256

    79c940ac2ce225b0c4d0069388610c59f7b5fa2eeecc92ec276fc56679071d10

    SHA512

    43254813b7d5ed744fd2e4ae0101e35b8e0c4118b3a7b43073aebb66d14a282cf3503c5fb2f160dba27d120e2dd430f09921b3b5aafe4f58d23817f916863da2

  • C:\Users\Admin\AppData\Local\Temp\CabBA5B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBABD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b