Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 03:25

General

  • Target

    ea7f3e677d1471d211516956bea55fdb_JaffaCakes118.html

  • Size

    16KB

  • MD5

    ea7f3e677d1471d211516956bea55fdb

  • SHA1

    9bbdfde4035ec92e84de72ccd950bc5166e27d32

  • SHA256

    1f35841c4a95c2b031fed0d70e1a94cc79edbcb0294929436aee6bb48953fc2c

  • SHA512

    7b4c58cc70ded50753869f151e6ac9a98e52323708f4a140b9c51856cd1962156828e263636a95716c0eb4c351017a7f7765b0bb2401ae784144a4f98479e152

  • SSDEEP

    192:CfMgBEOks1QTxE6av//X7/pfUSyxjc2Gm3tnGpVJZSH/dRso5qql:CUOkjHav/T/ZURIy

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea7f3e677d1471d211516956bea55fdb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1424

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    984da97ec2cad77dbfe6c50c1fa231df

    SHA1

    4406b247a0fed8b8320fe4f2428fe46dfef6b187

    SHA256

    3a18bba4954c8d61b695fae01c58c93a7c152128845bc2bbf11317cb58c06baa

    SHA512

    e40a54a6b0141e9d227aadbefecb2e96527f84a7d06431a9e5d0c7d48f39bb9f80e7a508dab131a520c93eed8007e195ef013e03e5aa4efb103886cb864c2ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5332c2e7e7fddcb96dbfdf647955eb83

    SHA1

    5f10aa7dc5bb6240bd0c7dc8b2a3cbfd5cd4345c

    SHA256

    27b26d0fcbc2116def610cc7d822552f524146d4cae3f97a86957d2a3b7f32a1

    SHA512

    be0fe87cb5f5182a70e50a1b9a783bff99d45cc055717ea203d335c3f9be738382f638cd830c401ab146368b74ad21c78d85c67d5360c8d03d0d9a009769d673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7290b2ee49f60c393e10c281e2e68cd8

    SHA1

    db17a141bf53a4512dfc50fdfb130978127fb879

    SHA256

    66985628ea28c7666798d1e2386a162ea21b4249b539bad70506a2684f67d95d

    SHA512

    6d0a31da70c0bfb16f9a0d6d7bc08839162acf054457df52420ab0b60ecdfb9aefa00b00b73db26e296d6a44632d4b1227046eb42ed5c8c1a1e05aeb765189fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d58c9da9f9761e56a4631183bc5634f8

    SHA1

    8d6b46c1669b1eddf40f02470024644c3db9c840

    SHA256

    8df9f0f9c1bba86a8cd58e65cc735ced62a41727e9799116457e8aae126856e6

    SHA512

    c4dd5293cdbd065b38e1d5efbba2a98f40e52f80dbe5b2bae27f85b03e68d3f21c115ed6a787279b0d983544dbe4019c9440a1ad0d7571d0d4db9c912ca87b8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be50f5d8da0bd0809b9761bf66d5891f

    SHA1

    1dc9235cbda569bce462bf0bd42d70711e4deba8

    SHA256

    2fdb386a1d8133e15d1ef052fdf97243ea899b68a6c5b4a74d3ea6d41327f885

    SHA512

    1ad62c8335fb2055b30999952d2a7803606deeadbc979f52c8e40dd47937a9fa1ad7e3af0f52012ea2adab3547142f0d6995cf4e2a36d5eefe3487422d7e8176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9be08bc3ecfb1aff6347a36fa692f79

    SHA1

    d553ff3433d28f7f665e4f35199c7c9a010a81db

    SHA256

    97139809364e9ac2a33fb48662d394a0042e7248188133367d98ecd58a733f93

    SHA512

    617bd4b8fece9729296a5829c66427c474446307b61a0630f5b066059711c1221ad3ed6dc1d42fc23b764361b002f77c9eb3846a4b03d472d851648086e19d79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    843e58a92de61a7f066476a3a5d7d426

    SHA1

    95feff2cf780f024fdbaf109c3f087ca2a4241a6

    SHA256

    cd0a3e9da83bef0c70641090a4ab22b55df6cd814f416337a5fd1e5a69667f81

    SHA512

    5f6d438a8b8686da23b203f6ca911d0ba5d2c86a1362753813d56521ed404dc1dab49214fd694935bd0d8691084b8fd427a2b0b44d352284919bccb894a0bece

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10e2147155e2c723ddc373d87f52aa68

    SHA1

    b7c759506d0856d18490b6f31a57d02bd125de66

    SHA256

    fb097e613b2844f620d6994a11f6dedb0c42ff29b2d718f1729f3cc30271b255

    SHA512

    784c5dd922938bd0f06fc2e1989e6a1d4d5987cc9de38ea59f81f85caa211bbb95441130f1e5b1399338aa55460a7f995f1bfbffd0aaa0b1b0e1d81b0a29dc96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31ed91a151d34f4a9fe5c1436cc5a715

    SHA1

    78b2b4e4ff7c3227077d3261c43f33bf9a935ab8

    SHA256

    1e3bc21652777366e98fa6b3753c458f032bcce60b23888bc03a56c411b28cf2

    SHA512

    ecb2d5dc2179ef08736367dc3902ae86b34c68669abc6bf7cf91bcd074fa8e0a4f66332c1c32799b28f3bbed7c52ab7121bf06092405d985b02e48ef5ad525eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    226986f81a2a617c3f175dd6a2130bae

    SHA1

    824f2180df97bf3963dbbb6699482e314149964e

    SHA256

    0f7def3e05e120e5b269f51b580711bfa62681acb0cce3617dcbe304702feec4

    SHA512

    93e6401a479b6976e6e154f36cc33fb7afffbc2b755ef0c20f9bc18ebc53d41811e8307a4fc3c9a140fe442e1fc715df3005a8f4d942912518710f57859ca46a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0df281b31cf64c5bf520e178f586694d

    SHA1

    129d383b7641e852c1a00c7c767dd105cd0be06f

    SHA256

    f2cbcd07ec870d5aaa4a075cac54ac76fd0ea1a2043045e7220c23cc34d21a19

    SHA512

    8fc9ce3ef3ed9bbecd66130aefb2c79b47c3ee63c72d45437bbfb5ea1bba2e6862c5cf8c875714013acbba2aab50a06e553934eafb46c037636f7a32b64950a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    482237cfdf02ac45e1abdd815d75cf79

    SHA1

    e28168d6f72089e40ad349bcb3479f696328ef18

    SHA256

    3bd208d98a0e1ab8779e8bbcf791747d54550560398650b88fae76ba4adeab0f

    SHA512

    e1eba6189121dee256a660e5ef1b2dfa738b08b33b2ca49205a33ed3d2fbc737a860374ab2a13540c1a920cb488adfc812acf34fd812d6d6e6bc41e93ddfe05f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e72b2f4b3a2791efda80360c0a22b68c

    SHA1

    661f3b21ddcadfef69175d479aee02a0e2801859

    SHA256

    f9547534049f753da88e69f16cc59f3e0942ad4cbdbba8e6a89ed4f356b4b801

    SHA512

    964a84f6b83d2f222b37ef903db4bafd1a1e963bb532520e53f1bd1fa91941b3fd54f966c98747447247d6b6e28937a03ca3f995c41024bc9833e9dc90f56bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbab20508f098a36909cae6e91e3cfc5

    SHA1

    b49a25f590b7d0373e68df45458c929e71d74ffe

    SHA256

    a9ee92ba8a576a5af4b57e261f37f074e83c10059fd15260d0b3b209118a3c83

    SHA512

    cca970a2fa0547a5dc4b302f308f8d9d79a6fff17e5ddcb611b15be9fb40c6173aac26fe70c0bc662735dc8261f1bdd43453f4cb64ee444006012c694268459b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fed5bb5048129e8159bf8b254ea78a3

    SHA1

    868b2c3aca12a65bca1f88142d84c49ad32e1825

    SHA256

    5c9432ab35c3a6d40f4a03906616323cb89a11a12dbc0c3c89b98a6a1ae5b4c7

    SHA512

    4a3743214c5a37139162f6ac68553012454ef86f728ad48acca3ad12f594198ba66a8cd8442355b883a8b4ff86eb1d881158f5dcfd10bc7462ee9f4ddb57a8ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39b1f4aa8c73410dee14e92b60a74f65

    SHA1

    0a43aa858f823a499bce6ba56620d3972dda2ad4

    SHA256

    9e4e594130ac0d616fb3da513f6ff59ce1bfa32fca3c55af7591fa0b40c1cb76

    SHA512

    6117f5eeeb20a26fc89927967994c9f1dc0f3088fdbe20b5c8ae7e238eb2f2db4c851af62c0b4de79415b21a494b2a85dadcc13bdaf8f758da397c281b361048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    993ea93f9fbb7c4b792f377b59a821f3

    SHA1

    5fef3866260d71cd4ba7f8282ae22df7f87c55e0

    SHA256

    6683d36ef3c045d699d7eadff07a6c16c30fd10f5318692f83626daffcdada90

    SHA512

    526c1fca036c3ead7488fea02f66c2300de2037bec1b7841af37d11282ea96dafdb087ea5d30e71e19587eb9e52374b190c8fd5f3cb4f6da7334989244db3627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ac2fdd7247ad43a44f211772f253cd9

    SHA1

    a25bd5ddc2102a9cac9415fccd49fa84c8901d0d

    SHA256

    13616792aae3acccfb4f7f2ba5c4639445d6d785a35bd2d1a2793dd1dd6cf778

    SHA512

    5e6f87f03feb7291c4f177479abe495432a113776938c9250aa9784b743d534d4b704bb7fb87b7b308c8513fb6778b513a4ebef55c66b2999a1f6098551d2a6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2ece714ba19a4e19eeb5fab7d1cf149

    SHA1

    0137a8010d4d0cc4b3287a6ac72bde0c4b5a872a

    SHA256

    a97bbb47111e887ee0af21cdc85aee681f5cbc7b516c2566e13e66c64fe7cff8

    SHA512

    002c8b7c96a0d233048036ea6942baed0197675133f1d6aa01f41a9fdc8da3bf76f924063334d22e545df7f6a9f30f55d841f07fb84cec82d94872f8c2856771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    566ad77b0601c5d91e27ad279523321a

    SHA1

    3ebbb857d387d6310b847da090cd2a263ed1a63d

    SHA256

    449c0dfd8bad1ff19ba3e4fc48b9f3d7cda2e695fa736d28eb5ff3cd0baff988

    SHA512

    6f46bf7c47c2703981075b9cf2786a84df0af61f5420c2a4ba9134fee193cd193e3d0a5a2b12f84bcf7e688357c3e5649b5cfc472da69cb231ea8844997cb8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91a8772a3389b27945ac54eaac8f922b

    SHA1

    cd3737de4d73b72317d1f59070eaa88b224c2e98

    SHA256

    2dd04e94ec7d82dcc0cb221d720952c1382be703f8df50c2d2f3ed6a5680f2a5

    SHA512

    4da189a797949154dd2666fd19728a34bdf27af462409a712fbed6d1deacf4ec7eccbe115ec26cbaccef88bd7066ae231eea1c0bb7ae0fe1b7e332f262a10538

  • C:\Users\Admin\AppData\Local\Temp\Cab1B03.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1B73.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b