Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 01:08

General

  • Target

    ea4f55ccf15d465bc87c14d3c9d1606e_JaffaCakes118.html

  • Size

    23KB

  • MD5

    ea4f55ccf15d465bc87c14d3c9d1606e

  • SHA1

    88a865f87a953bb924669accbeacd460b0c8914b

  • SHA256

    43c44d8b0e7e0c2360acea76b8aaedcaa5bb2825f44681a057799758aeec8932

  • SHA512

    90294b5b296dc19d1afbd870dda608e02848c4c8757ec5ded95d2e5eda332b591944141b14b20582bacafcaf7fecce2cb6e27a516fd71d9209fca0cd26ce7534

  • SSDEEP

    384:0jYcHgYXso/n+57aGA0c7iGgxuLwMKFMpqPPo2XWU/KSS0zasZJ4LpW8WAmjaNtw:0jYcHYov90c7e4LG+pcA2mU/rSea+4LO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea4f55ccf15d465bc87c14d3c9d1606e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2b5eb5c245c74fae282dd48699de71d

    SHA1

    3488e26b591eb42f0b18bf2e6414e266af5c69e5

    SHA256

    39c52a678b684bafa0e7e55d93b18d0d07386d482e3a0cb0ba290d05f69c712e

    SHA512

    e8a2371a2ff1bace7d3aef5f41f5076bdcd2e5b452c79edd0a969b798e07e27ed194373555bd185437a9719d6f49a289ce0d9cc114a3923a944f58f641b293b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4393f4afb878cd40d4edd12d1d289a4

    SHA1

    a58896dc4e998b361378ba75da164ebf0a2d8842

    SHA256

    5d71c5a828359ce46f9ec770b37e7db95f150cda8af4ed38a5285c27813a42a3

    SHA512

    12925562af1f1e17c540ab93e5e90a0e0a5633787b5eeb15a9f9e908687ec1d7cddb3c8b6861d2c66996859e204873d64f9e08b60ff426c462b04ce8b6b08f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    332e617ca48a8ec7e5b8dd2f192d1e0d

    SHA1

    593d1aa36758044b5f495be871a5ebc2d4984ebf

    SHA256

    1a7290c0429cf04de2c713b3bac752fb26ff88bfd16b151368d0d42fa7ebe636

    SHA512

    f1650a0b47089392e8cfbfcda1c36bf1a3c86c5c934e36403fd525c454d38d0bb4406074056814189b89a00f1feb8f316fee310f6e66e3ba29ddbb9754984231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    047a193c73e5be24d232aa4af1c28d83

    SHA1

    2effa29ee236c87760a337d473b1018f918d8ced

    SHA256

    74be386fbaa81b7708cecba7b4e205b1d6023137d7f454df355dea11d0fcf2ce

    SHA512

    d116be512070badab41d3a1731692de1fb077bc57023b12a22d896fba7d07485115fa7fc64f04a0032be36a0599c01b3a3955b528af93b26d484f97238dcabeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd2c816d1bc767301d05521d246e9b30

    SHA1

    5b2d385d47ad59a118bc331a5146aedea7e7527f

    SHA256

    783826ed1003d6dfd579e1db6d83427b225e70e29fe59533b99b0a7ad695ad05

    SHA512

    a289c524a8f7e6da8bc633de65ad155292f71becd774470c672cf68dc18febfaf1617e78f866724b8f047e337e485b57dca014ad3543ab03aea8fae280743661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c314c0a33057f5649d043051950c490c

    SHA1

    3214415cdef19e1139c2e675979f3d4e1510e6dd

    SHA256

    4931d084ab9e3489d26350ce02ed974ad962f138428490aea53aba1945d2f4d5

    SHA512

    eb6cb31f1574b1e55442c61e91a1d8b936e27106644183497968260fa2e46b7d420ec25e86bc467946b43a471c237af4aed24bb56bbaa16d4cd539be28219c88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaeb621ec436f7ba771b331a4d0da5b9

    SHA1

    bbeda668266b83e2479bf5e1e9887ee674d90e72

    SHA256

    4f82719a0112bbb4215e0bc6e71025c11f1b44ec2b2b8343c82a2e50214a2140

    SHA512

    deb2a7a1c6504867ef0e1d3e085e8a81f57bd1ae3e256c3225813990923fe1236da858a1088dcb0eec0e59ee0a849fb3b6e2c9aabe8f1112c0bd793ec397f789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03a7b059de87ce7f56fce0e24f6679a7

    SHA1

    04aa07fc333bac5ce72e281ba5b68312983270b0

    SHA256

    0fcdedfe9f1c453553c90bd7639541bb8b07314e9f47a1fedae03cd8bbe3af08

    SHA512

    e8fe68030d20e1d5f2fe80e1304094d9a98f38e44edcb16128a86716ba614455fd976f98d55f33fd24658c8356cdb31d7aa418e838b0d954704b9e7f2cd8c424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0713e39e72809fa2f4c6e409a519a419

    SHA1

    80e3d3fa07b2a4b3f919cc10b7da28621f4e6264

    SHA256

    7011ddbc0020d48e98160a1bda8371399c9309044b6ffc751ddb85f7d61f74ee

    SHA512

    dfae240715638e935b0eb8ce76ba3d90a1de86a5a89200cd35a21d43ab17bddf05eb773b7851e17fabf739611cd442eaa9f81343dfeb2d06cb490f7e5e29a404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e6230f5e5bbd92e5a4ee3afd5000914

    SHA1

    0e1d0148c40ec5010f9c0e4fd03dc194cf1e55fe

    SHA256

    795a0499edd94f059703496a89554b5338c7e8fb34f2144194563a1ffabb4a16

    SHA512

    25f2ac765f12dbf13b387e41dee568c98d40be1f95d3e17d4b7387c1625714373542e386240d50117adbe5cbc301578466ab364b708f2161f58dd0388fd410bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abccd56bcdc0ed109380e63807bc461c

    SHA1

    c62bdea4ffb2a81770bb671e72e3646411a96bcf

    SHA256

    dec48556eb0f9e610caad5f426e8cf07853eb489a13a0fad3115203db3c0c428

    SHA512

    ae21c0a103e2dc37c0ea4192804f62bb5029248b8dc396b4231bca570cfdbdcdb021da37985148cd7a3218539a434585686c50b90fca60fccf21d7355cf08517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f94bcec94c9afc4c80d1826a9a70612f

    SHA1

    e40d2172b393317e19c2aa4545f581a20d291af6

    SHA256

    cc3747c4cfdb050954abb1c860f258ed2c8be767551d5697e15ccb5966dc3744

    SHA512

    ff37237428525633ac06fd7d89816620f6d484bb6c636ca47a2fde49c0d467ee44a969ba38e191ba6ce29022ced8a6f6e4301a262808403a47571b0c10bdfbc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85752a1442c02a0258300f5d158c563f

    SHA1

    f7934c932a45b2ea92b87dc7c62a904692f4a4da

    SHA256

    2ea2a76c4708509b25a47b56e613264f097c14e201b8403813b7a105d9f72e0c

    SHA512

    94333e5bb309978f8febf2ccaf3023c1579b4d7de0848b58d3679ab5f3aec001dab0d4c13668af1b03f5986598cb8ec6f2d34f6d0e49ff8798ae1e5a3f8286d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7a7e22808478edd941f8cf2e0efb99b

    SHA1

    4fb626c6b48cb5ffde629d5879b51754d31c75ba

    SHA256

    7568397817d09e20a5fbe5cb46a3ee3d601bdc3332d2660e361930e52918547c

    SHA512

    1d90b9a4488ef1d5870880939a0cc0a8e197fc6039b12a075188899edfeb0ef107be4932760fbc125edc9573a6a010518c4f7f0832dafdd48800895e7409c8d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb78a15072abcabf302b3abd3c5df5c

    SHA1

    e1808d4b56f15ed96fc59662f3362fa7c33294ce

    SHA256

    515434fb80c9e2e4b0f14dc2bd1123f91910b876caa7fddf50867bb7528a7ac3

    SHA512

    6bde02309c14f704411deba824212f55932b59c7ebde7f5101a1e83ea363ca21e9bd3897e0a2f69777b66e492033f01ae5a1a02c17be65bc2a65d83aa4366087

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dbd2759abf5dc8008082799f57761fb

    SHA1

    f2ef90a8432f3c8aca3c68eafb3d30eb55dbb9c2

    SHA256

    df616d8c832bf5a8b8076c5c615621acb80c0fb974dfd744cbcddaf49ecfaa6b

    SHA512

    01060e82519edf176aa443ce3eba503526118f1ea3117c4fda02491ba056728a11cdf27dfc61820f22d30256545e422c3d651f82586191af45527789c22a0340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    beba7b15442488af60fbe845cd6c259f

    SHA1

    44740b0da41e03545c6fc9afab755b5c235c6e61

    SHA256

    445be8bcda2a8975bcb3ac37c195caa463d1ae6712fd6de3ec460d6b6f58a52f

    SHA512

    8a62cb09bbb3c3a2c3765c55326b4184592e8e2e0d6c468ebd4c63fb648939230c544032e0001fbe3f2361351f79fb159edd335f43ef67c162f67c81b163fb76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a971c55bcfec3b367d27c8423764617c

    SHA1

    a603deb44d366fe423cd99d5393d0096299e5aa7

    SHA256

    8d48d5ac7bd2ed59378158d6c6594517b150875839107c014019ffd7f579a583

    SHA512

    331b87fc349b49933d1a28d266878681bab02db8967b1e8629268842b038d68c3fd6e685c1b76320e0f5ccdcbe02714f6fab58c2c106e8723de57b9b3b993a84

  • C:\Users\Admin\AppData\Local\Temp\CabE756.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE804.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b