Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    68s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 08:01

General

  • Target

    e20861f9fcbff174a32a293326364668_JaffaCakes118.html

  • Size

    460KB

  • MD5

    e20861f9fcbff174a32a293326364668

  • SHA1

    a85c2e38513434f79b6c7fc0bbf9f2ce2e967235

  • SHA256

    8c1619148b78a730f0b1a2caaa7a0a630a579fb10a060c0adb7a25e6788d745c

  • SHA512

    9c72cce1abe35e6f9681479d7b1664d9f2fb0b1e14c5934addde58a09c3d834af25b130c1a73200bf02d1f4038f85d360f9758c4e0d63914585710209d487890

  • SSDEEP

    6144:SDsMYod+X3oI+YdDsMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:A5d+X3L5d+X3D5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e20861f9fcbff174a32a293326364668_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d22478ad581cbb29e1d773971310db1

    SHA1

    94ad4a6eb3de993e6089c3599feec9d09f53413f

    SHA256

    7b3d8803eb9d3904ca37dffd22426ac5b54fbe84f21535e69b53fe54d03a40c1

    SHA512

    3cb7df6d24ae0709424b79d19b60388b8c85fca66c424a51508d10d3195195d1c81f9ce9265f2e27104456f219477f95ef7d05acbac0411b7cd243f38fb1a4a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cfde8dd10b634ac751ab50df48c7173

    SHA1

    f591b4963481c9c26e19e11ea4420dbd81bbf80a

    SHA256

    8e1c11ce8c42d5e2314dcaf66c3cc2e73caa6d2ab0f8a5e4a4b126d180f95652

    SHA512

    986e00acbc1f4fd4e0b3ae48a91ee3156fb3d326bb099d6e7465ddf04f19508a835defc97f15f7b9d43791f2e79783d815d62fa13a5c89449ea588fdd7a1f96c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    605c3d8f8ae034acee23e6bd748ba6a3

    SHA1

    ed8ecd299995322f9b5e138443685c43fa8ff826

    SHA256

    86b8fb0d44178a4106f44867a9559b57feb7d453d09a8593c664e31502fa1013

    SHA512

    eaa96eadd1ae9c2343d62ca12c7a900c022f275ed55d79e7dcd3acad5b5101663b92b3bc20e9f344633534aa30b57e62ef6b91b37179d55a1ea596ff8841cfdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c73c20bc9989d5601b1aa88e74352b2c

    SHA1

    e0ce61eb8735fa5a5a32688634731f2fa1cc1fd4

    SHA256

    103e7e2383f5a8a47be5426e4554b254a74cfdecfba8627976f9dd5f9d9c2f1f

    SHA512

    1bb44240fdee79ef73d1069463069392e6f30283782e8b3038f582749628283c24f30c0f23a0318b9b7493214d7c2b309f4f0783f78c7ef7c0377b9a6f355ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fad56a1ef2df07be966616710145ab0

    SHA1

    1848f5de30eb09479db2e9bae59d3afd14cf88a8

    SHA256

    e789b26422d8429cd628d6ab6a8e20b90cf6a40efd0017b2461b3c4cf067d145

    SHA512

    0537cb1d2a7e3c093f89f4a6e451567e16f689cb3c45b8b75740b58458721bb56ed7750c2c0686cc70e20fa6cf5e261d24bddb46468cdcaeb15fae87fb6b0521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2e3dc44ddffb1a08effc7487bf770e5

    SHA1

    f92e250a84acd7539cd8ac7b7374de04e520de94

    SHA256

    1409675eda53782806c0b151e1c6558307496816098cbf5204fd3b7bbf15d523

    SHA512

    25972d949a9c98786300b46a98587aeb63f34c2ea108ba55984ace7be30b414adbc7b2a8596f52795d38ed34795e4d1b815c6be57079498e01fbad284b8c6dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    246754538353fe3c13fb1c290e6708f1

    SHA1

    f727e195fb46673d70383a155eb56129f67e81e8

    SHA256

    c88768b10ab34638984be202138b1e0dc47c9309e35cab4637d0e399f37ace50

    SHA512

    d343a0e7e6c86131cb1e56c958c0e8f6266519fd6795153ceff2bb96a6896547b904ac117bb0e9065707e02df6597c73422791e9af3577b0704209df987031ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    680efde26e154df43cb633d832db4274

    SHA1

    49afebcc7cc971dad7283f0455e071e9dd9308bc

    SHA256

    fa2e46003508278345c1c57cfee53e2517f76ee71a22eb83ec7b3d80e8fa11d2

    SHA512

    a64584d0c95e1f4702f19409cf86f5303cf86e1dcda40f3c4dd67fa3c7c3e702af2592dc9fb2bb3592851fdf1bc28b13f159d61e246e8e83aa520da69c2091b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c50d3dea1e109af692deb92b325980d7

    SHA1

    fab874566c1f6f69d24f9c3985b4b382b917e1a8

    SHA256

    8eb8dc9b7d941f090909bfc1293587d0532a9b7af2d51e9b192ea6ec9ff31670

    SHA512

    d95a5ef7b225cf33019f3b2fa8628e6cad8ace5a16e906613c016fdcd1a18ec23a88a6e033bc28e9c3d1bea7f9477b4dbd9202fa68fc8ca6530245f8777bdbaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a14db0faf3d7e2dc2e30d939ed9c63c6

    SHA1

    ee47848f6d5053d77bbad073ebff3531bc21661a

    SHA256

    d45a7d91ebe3dbfd25aee83fa3cae7df0aaa4fc98f7dc38deb7370b01d1475e0

    SHA512

    fb53a701e6bff1a5c2a0ca87583cf0a9b9fc3a07e69d862c31befe4ca3664a6273ece30ab1f287a3e8a5d622f803dc06d7c920b7367ac832feb2962b9c4eb936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a834ede597cd1c73461ab244d100a94e

    SHA1

    c0793dcc23d0f8eca3f08d1028f3a9adb3f98acc

    SHA256

    3bc1d2f2f0913c342960d7bfb82bf20d2e7e7b6e803907bbca1e57440ff6a0a8

    SHA512

    99ede8ce79a730d66abb165a3a112529f86f6d1aa3f23030cfc722abc1ea3876b247aa7328e36f9db19b088a89a8b5291dbb27e9f1a91c88086fd6a05f7b4f17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    028cc8c8115ea83ca68e94da9539246f

    SHA1

    d6aff64e893eec50689b08c3da77d85773decea7

    SHA256

    4d1c0f6637c50d21c8467d95415fc31af321655504441f2b2c47a75e2a5b68d5

    SHA512

    3e752025c750af5c4f51ddf2607a8dda5872a9ba4da38e417e36e3f3b7582eefaf7ccca5fbd95e6163db8dbb33d61c344db7692ce0a29173045696a3deec12cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7f5682047c560b30bf88454e12c5fa8

    SHA1

    9f4ca8ece4544b28a35412a9793a6e5f183e7871

    SHA256

    64db82e89c82f886360508cfaca7451d28e6c5471429b42be0adb8638fe1937d

    SHA512

    9c497f28d7e209781d6b5aaa8d2558215db4f7cabd4cb76a9860fd53e05db2887b772ef5d70028c42ac83e36b9f1e47b432af32123e334684c729275213c5a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26195e329a5a23d0d5fe8f48a8844ba0

    SHA1

    0d24234847d2e4715e2ef2f258527e1eac0c6c48

    SHA256

    eb20f566fb3cbde0634ecf8a3298b010449ad0e55829df3267420f9e75fbb155

    SHA512

    f4efbfb1a08d3968b6218484841242520e9daf43538a9df03bd4e3b8903e3a7556823fbd5cc02f7d21c7cb84480b9a5755e8c7b6bfe8b05a561dfafde4aeb650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26e0e60f9b54811cae944c9a9f333c63

    SHA1

    ae6b2bc3b6ef76c2b26657b0f6dcaaffe7f15866

    SHA256

    9e9eec274d42d4ee42ff4cddce7bedef5cb73a5e040cde10660ba394f1bb28e2

    SHA512

    4b954a98624d32c37517460cf792cf6e410a06deb03e25bbc16b249cd634179de284cbc1897ae768796da563ba03e7a83caa911d41f06081a7cac9f7b7c189e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8660b7cb853924d8bd54c3a058241af

    SHA1

    33f87c35c7c6edf22dc850c89fe0f95857c9c5c6

    SHA256

    e79565f1792c41c1f790b58530c416e9cb79f8bec383a2ae580508f8c8688d3f

    SHA512

    92cffff6d3ab3cb4e83776f4845dc1b2d4a47e47c87bafa4f6f03fb871992ef5e0286233338148f6ab939567c4246c5e15a0f7665f942cafcae81b4746e8217c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30743ba081a46a7b30b1e17556fc586b

    SHA1

    d0f7a153242ce22652aea6803ecae0c8c2a199e4

    SHA256

    78dfacd850df59f0c9e5a4cecbbdf84ecb3cf39b69f356255105246c6d437bbc

    SHA512

    49f47301fcf09eff87a55f0bdd0e3a87045c29ed2a46ada4646b8d35f6905441aa921bdc6410be398fb455bf5717dad3c638c7be667aee6776bf24d9e086ecee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e8a886368d93cce08e6e90bd3ede1e4

    SHA1

    a29ef125c6b0509c4cfe304d91760f45319fe96e

    SHA256

    e67d334a6daf802b730d1da41a8598db041d44957753c08c03ed5c4f0a25cda2

    SHA512

    901c7df1fc2952398b153c117ff15583178d46a8f1f6cc8db5f2299e793419d2bc3d8a0993a9811f27055ae5ba6d26933ca319cbf7238e6d6da44ef95aa37c26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    475b447ce1769b0996eab89ed70a985e

    SHA1

    66e9386e6e2bdf342c65604644db421594196a53

    SHA256

    bf9cc7af4d0348f43b7bb07496d00f7a37e27e8d70bacee31ccff65b88c13e1a

    SHA512

    56edd9fe4ebe7b31b2c29998e9ec61899c81ae4de4bbd0741add2693118b2741e2006a287a16168a03c1eabc1313028088f85085290da4377ff2bd2fa54aecc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f138b6a7da1daed8876f99652cc4273e

    SHA1

    20f1a002e3bc626ec893e4f282421d6f4cc6a639

    SHA256

    8deaa1fb8d434aef48f6a7cc19ddc2008e35f6456dd9588334cdefe47b4157a1

    SHA512

    92649f5842db64fe4520b5f92b1cc68950c06e069f5e1e9b8bba13cb6ef5dcfedb7d0df5bbc15d21696090c1f250704e9a63ea4a764532638a805e0922ea9532

  • C:\Users\Admin\AppData\Local\Temp\Cab475E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar482D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b