Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 20:36

General

  • Target

    e0fc0ceb727f882c49521e9e39e88478_JaffaCakes118.html

  • Size

    23KB

  • MD5

    e0fc0ceb727f882c49521e9e39e88478

  • SHA1

    20965f4857e24acab15c9edaa1a529f8fabd9c77

  • SHA256

    9024cc9be933751fe4993d69b135633232d927c489bcf78540c0e1e4b571911d

  • SHA512

    9e17225f6cc9ca9795df59a96beadd7df5850bc613008b9021413dd0ada7a19eab7a8e0bb3dbb99a008127e196a855a74dd2b7f9a68a0a5d3a9eff76d4fb964f

  • SSDEEP

    192:uwHhb5nfEXGnQjxn5Q/HnQieONnBnQOkEnttNnQTbn5nQ6v06J4RnQNjMBuqnYn+:jE3Q/Ev06k4Lo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e0fc0ceb727f882c49521e9e39e88478_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2624 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2792

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    274b27af7946659dd0302dad035a0d79

    SHA1

    7906090d3d41cd5088fd63ca235a889b139bbbdc

    SHA256

    0c0a6be08a4ad6e831c7030cce8187287d0f3b658383bf01c42bfb0bc44a1fbf

    SHA512

    2c52206e5f96ec32dc315d3cdff19d6cc22c771573a84cbf20cfa026380995fa1c2d34a2b9e37bb3b176f650f1c055de8e15dd27e789b31f79a1482f76ee7c92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    908627ed2c8d9c8c16d469b2ff617919

    SHA1

    77413d4f263a2a847a5b10e6a0aad26c673718db

    SHA256

    f7d6019f86f77e711248c595b65f8618aa4fe7e058f24392746abe22f6d93dac

    SHA512

    6c8ffde69dbd86174edf4324633740bca1ee6dbd1461ea6f034a9b0b2fde1b8026496ea5af522b66b131fde1b91208fa647bdd995f05bc78038321f408405c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dd4666eb13781e21bd75ced7cfb2efa

    SHA1

    ad452d8a8e72365fccb854379efd7d21458af2bb

    SHA256

    200a58ecf5acc92a927ba238c8c51e187ab5a92dba7ea2399c2a3082327ea9be

    SHA512

    fd7bea94ac2582da689a7f960217565ba893ded7fbc1db7e2bdca4f8921d701d23ab6823bb2b11393345fa816fd571b100a1ebc13ded62633631be089ef73795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae12e9a7520963e308327e8191390bc4

    SHA1

    34bf208d89472746b55c2eb93d54239b88a57c41

    SHA256

    7286983268b452999b675892b3ab7f4bd0c5f85dc51864ee5d8a5c2b1c1255f4

    SHA512

    cf33f9d95f42b2c02918853d8cef6b1a5c662da25e056e66227e4c2aa290fb2b58dc7fb7ead5307ed75521085afe2c2a7c9083814f4108079a5fe62c098b4acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c98c3ffeba5bf476930303315324813

    SHA1

    26c5723194f7f9b32a0c4c2ba29202890c5ebd27

    SHA256

    c540611c4a2fa4b35de98c34418b7dbb0ffa306fea7c4ecb722676f83f212057

    SHA512

    1be7cafdddaaa32c5e7c7d8a7be068735d6cedc72f52b7034cdb78aaaa58c66bcb1da48a394ed0a776df79cb0e86cea52e904805efb1b4885798e522b18638a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7997203408fd8cf4b4b797730ee66c7

    SHA1

    9586d554615cf19567906e49ec53345a22e67490

    SHA256

    a9b1abc203a4c1fa2329d1d41786a05715cf7f152c08e6d59b13f2d28519a4af

    SHA512

    fba2fbd4c31f01186f5bb491ca16352db5eb4e034e738667477460c52d609741d4fd07a65183ad2a9d6ca83644cba7b316c657fa7d8f441555019b8ce68b2123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d1c714a0264090fd12f6622d317016

    SHA1

    59cfaccb0b7744b8b551b4bc9cdd7d76b36ea193

    SHA256

    c24f710a2630cf9fd1d11c10a23a9f8c4d7a53755bf5944695a0e724bdbd4b78

    SHA512

    2886a7895e40e3ac6be984c3289bcb7269e034432d6290bcf88b7d5acba98084c7893eacff5249a9ea2a5df90efc40d074f524e95d8ff4a5ad926faead087176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1b9f7c3878c77f968a80f7700546b8f

    SHA1

    7993e86877ec92106a0308dc255ff3b54ae23c8c

    SHA256

    d54bd87ed8bf0d76baa6aac80ba1d868241e57fb4d3471a7bcf5e7d2213f5a1c

    SHA512

    e3385e610184d131796ec97a81254a3d982c3d54ddb74b44da8d3411f9ee23e903072dd68ffe520424cd120d63fe626248306ef8147afbbda3aa28c09cb3f6c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    335604ea4dd1a2febf7db5800854593e

    SHA1

    afdf677345a699d4e278bda15a7c4b0bd648bfa3

    SHA256

    2ae9ec8e407962af4d267f9a3063d69ed73916ae43e1e832a616ca8612386aac

    SHA512

    ac69f380cdf960b5648f771b56e7adcf41ca053b5971ecf6209bb81cb65a14a7789a5724882356c13a75db5220757c52dca97b72ba77b3bf3bebd727a8af0e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67d42a3d3aad01293be4935f237564cc

    SHA1

    9b252b514162e71432bb6518d3a1c5855e1d2918

    SHA256

    1ce39e8f6427261ed9aa6454061ba3d558cc5a461ddbe868390ef99119dd15f1

    SHA512

    7fde94e7cd927ba02f275884fea5fc5a7a87c22098864744e4cde9265a2636603bfc4feacb4da0d4fffc862d587541515d43e03b12ac188d6d6f3c2b307165e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f41e992e323959540f964b83fb76fcb

    SHA1

    ff6650747e37ad4ead4933c90c343e64be681107

    SHA256

    2169c144ce1cb224e10d53588781bed044d3125f95848473d302f199170a8220

    SHA512

    b8907f49818a085962d69a6035f0d581999b7da9bb4deee864d29c5c15fc8addc48694f9d31672598dbd0525fe035e374ca6cfc838d4ace99019c02dace22c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05907666629459a771c0ea43f49158a8

    SHA1

    cb4152289f048245cbbdd4a115be884ea3a5496b

    SHA256

    840ff8ffce9684f1d3e818f7d3b204d65d363e917b803f457239e93bcc198b2f

    SHA512

    704bc946106a93a8f7574b9116dcbbf4e5b08a613bc8080e083845d70a74e53ab06b6ac0c409933936cf3ae6862e2a815b969e39421ab7886c974963b1e7d40e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ccc2a9ed9108a7d3a04ab8fd940f205

    SHA1

    540467f35474a8de131df97752b96ce4e1e7d334

    SHA256

    729272edd7f4ab8f4a5a54c2fe0b5b18df6108ccb53721a958e8d4025a7bb737

    SHA512

    0d075b98c51181bb6314cdfdd28b7f0aa5f5a7fcd902614e260ce0d6546c2071992b09d2ce81c38ffc40aa77ffb1369da162dbbb4f32591aa002497644f8dcd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a8c965c890d869bcdbf3eef52d80281

    SHA1

    15ce4780a2d5d0ee6fe0b20da3880a9e07ccca57

    SHA256

    13b9287df39dbd804a43515ce3b10d5ac6479f5346aa342f32e7939cbb9b6fdd

    SHA512

    59c8e6aae10157c513a7d71a123ee5e9cdcb8c43e11f7676ac51b22f8a8a189332ec824b2d9cf2f56ad7032da1412ebdfdacf61e65516f681d5e8e7e47baad6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d9104a9f97892885f3c6e7a6846cfee

    SHA1

    fc6010888966f3bb950e858370308e6f72219aec

    SHA256

    66dcfcf1dc4d4bba2cf0db32ed77302e279618d9339a00f770a60d8dd0f9dc77

    SHA512

    f58fbe66edd706092be0c2e74f7d833db3007f15a6b6b32080ebd9654ecc16acff990f3d15f526ee8df88aba3e528e509c15b2c1a478254620dd42cb54b0aebf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1679b586bb4d9cc425d0e4a99024dd1b

    SHA1

    3ae1f385e6dafa4e6b59723e7b8b8cf7a03ad8e6

    SHA256

    07c92af9e3e29f3a8e44da590a6784ea2c41d1c9f45a607b190d17585cfa8a45

    SHA512

    bdede61f7fa8d230ce89b0c80dcf3b40a32f50d8b4e415ecb75df8450adcb3309068ce9f613fdd5308be59c756103d29eaa271300f74f9982e0c9d88572fa2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0538c9be166048ace5b4d4c3534f0177

    SHA1

    6dff7ed9a172055558694d3950d22a066552dca1

    SHA256

    7b9459fd2bd2b239254cbf93c32e971c861d5ddc2469006e627ed23e21f1365f

    SHA512

    6ca93163dc7a1e4de9d23897b5598bb6240fb096fd112b4405ff5b2e88e462a0ae73ddab289717e3690b3448b64e3b673b3cef961f40c997d87c334801169ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83a7353a6925c7f0c59abdc1a65b5538

    SHA1

    baa2369d010e3158aaf9d5234d072cfad004f1ac

    SHA256

    71eb66ccef4a3bac1474491fdd7b7ccbebceec60957ac5097eea5b5238be7656

    SHA512

    c5a1369a9f260852f5a666105435f7180febce7fa8df0d1b6612db9631e7d4fe98e1614f054493362fff88c0bc59a6619b1120297cd0a78811aa2ab4124e2603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5bb3579bcd4bacd0ec9335790614237

    SHA1

    137cb0eca1ad392ac16b2a05dfc5c1ea99fbfb48

    SHA256

    1b8537b4381b3d7bbe09f9a8b220ff8f78871a4e7bd44cdc70f9df151f4bfcbc

    SHA512

    df1ed29c1872b3d52081d1e15b0496d58131dcd1fe1742d4843511e5ebfdb08b37d3f869db0a118690f9e56307c2102076a86b93dd6208399ff043e448184868

  • C:\Users\Admin\AppData\Local\Temp\Cab4D29.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4DD8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b