Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 05:57

General

  • Target

    eab66698d80207b607f112c424f4d604_JaffaCakes118.html

  • Size

    70KB

  • MD5

    eab66698d80207b607f112c424f4d604

  • SHA1

    4f1153dc41ceddf618e532213fc2837298ac6770

  • SHA256

    7edc6d1932e92b50c7764fc4998729a91cc6dcecf9c7c9d1357702251581a5eb

  • SHA512

    91e86ef199e304903e93e0e70963c4cd0555439be3f710fc0bca0aeec7477df5c1b2a0670ab6ed68708b61f59340b8b7ce05e8814357ba4a47ca5239efa35c58

  • SSDEEP

    768:Ji/zgcMWR3sI2PDDnd0g6OWQKNoT2e1wCZkoTyMdtbBnfBgN8/lboiGhcRfQFVGQ:J6cMETTNen0tbrga90hc+NnhVJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab66698d80207b607f112c424f4d604_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2640 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    348b71d79c572c9ce6344878962f9c12

    SHA1

    ec2d21b44010c284724cbf97a7073f48f608790e

    SHA256

    d7f4b8ff8e17f2b3caf8b9a8a5eff86b8564c310c2a6d9bddf6cb35a20c3a084

    SHA512

    051b587f95821b24fb90f4e4914ecf93cec1162d15ab485696478d757bf1e2e44a4f7387b176b55286efe286dc3c07d38d94429c2f747f168c28a6c5a0847f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7d6e40bbf8f745be21e916533e00c61

    SHA1

    257323df6c8900ad2f61f046a7a12f122eb323c9

    SHA256

    6f82a6188445178f046eae461990514ed43e90131482a15110a2c15e0513118d

    SHA512

    1616c5e72d71b86293fcc9276eff0306e92134d628b84b1ede7da2a59e29d32efee105eb8a51167e206de763b313586b68477933812e20420717ee4eb6670880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd800b3d18de471981e8dbfec136b560

    SHA1

    72d2d521d20fab39e821ac5db18298d5e0fed484

    SHA256

    642eae742087597c894b9fce8aa50e7e972c7088245ed5f2536e3cd21f05b38d

    SHA512

    2ae34102572b8db13f83e74c8cca6ca16d417516a0b3f76e96d09c2288eb10a57297c609bb1450f7302ce33e3fc0f61d4a51cd66ddf66f454edb7017bcae16bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a96d60c59a49ad569834ed3049ef8eaf

    SHA1

    1bd6143faf3a3666db88cf6775eacc4775f582c7

    SHA256

    ade8a655b53952b55d9ad4f15fe94b31c71e1b7682b1b66d2d1eb94405affe89

    SHA512

    069880bb351b9510b3036887dea4ed9a47220d42ac6992cb50e85ffb846e83770af75beb7d29930f35cced724cfc103c56c54aa6d668540f316e7ff3710b7450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    573c09ea2618f093697923c7eaf3b894

    SHA1

    8d8651013606e0f661e7247d3779508c3554b984

    SHA256

    3d23bcecc407f2bfd1e225dd973e4eec7875c17ca3358eb20ec6f9d18ecbd201

    SHA512

    9ec1bbab53c8a768e19c21375661671a3b27b1a0e4c51f43602021a74965344c1f824e6807a9346eebeb7dd8c2c44c35039e14fbb0710cf607423af99b3d4d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    346410c1a0b592d44f5cdb8a257bc514

    SHA1

    c69748f9b3b35f38f851dbe6ca16d3790473e5bc

    SHA256

    70655da3e89ef0b72e65b0ecdfd862ec07d09729a6868192bd0f0b678318c751

    SHA512

    bd45b83d57f37c6362eb86bee85abd6dbc3b69fa2b5cac2692fe2e5453a8e91b3d6c240d27330e3d5e73b159d325db078ba0ab2f93aa1226bfe2abf2d715866e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd682352276078627d74058fdaaac71e

    SHA1

    4bd571d84c04083fa19c0d2ccc9904e73bb81f07

    SHA256

    0f743e329fb969cc3e03c021e80310c226cedaa5d3692fc11db6694af2d3ea8b

    SHA512

    47cc12dbb893aad8e77800b93587bb9419c5c21aab64c2705d3e49885e56b3800b7a5c1ca434b1ab4a9ec9312413a8dc160339ece162e8983708eaa303169e0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbc7747effbde0a3685a30c4d8113812

    SHA1

    2719244fe2e1b81b1ae9d6f84022a1720cccc0c6

    SHA256

    e667dfc993cb29255a443b05bb3fc6e6cf25df0b1e44a9b2594c274d12c96e1d

    SHA512

    c9c50f3ee96eb2cf06a179ed5d57438c21d53d41c88f774306aaa151f63c3f7e66da99993e945303fa0a4b51855d2eb3d7c8721c6ed523aeaea4b7d288dca136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5003344fcea4a04b6b483231bab2372

    SHA1

    bd1ac08c915fd8bfeb27272f52f48d9ca38727d5

    SHA256

    446b682cb751ae6470e00135d5c7fe690fce76988f96f789cd8bacdc636e7b97

    SHA512

    29fb0b5b5dce32ad83021e42487be0041c1ce1a04ce716505792b49f327d36c1cd899b17328e2acc8db7c5374bd1e911073d857798584b0143136acca4ca1a13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d44b6ec59757b4e3ae059b939ae645c

    SHA1

    4e98260f3ba67456553e16d84847f0dce76631c5

    SHA256

    f972ab602a36f0caa32dd1183e976b8633576a3ae529a63ae0e6e8ed0f5ba930

    SHA512

    f3a64473073b78eee94c07872691c92eb0b0a06f5d44af3cce8c93edc576094056a4f41742bb6a713459c87ed70d78866616fb6d76c7cac6c3a8544081ee35a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f85decbe443db0d16c878e1bb422cb08

    SHA1

    c6795473b5555fb8e73d615c222e3d9fea6309e4

    SHA256

    86fb3cc0dee0318f7c60ae31e0227ec50e47aad95c5608344a91f7359fafa82e

    SHA512

    f235e5ed210c5e278fcc57b70cb8b1328ce47c7609bcdfd70f715d99f900782653ba643a5791ef8fa3604e9ba1b5f2c857b521420b3d7453c01bc4b698afa326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec8a623714a6fcb5bd2c12a223931771

    SHA1

    bd7d766c794dc258763e4232cded1333c71d1c78

    SHA256

    3ebb228a5a5febab7b10c700d3d3f97bdf3107e738001d2c50742671c0842c99

    SHA512

    0e09dc87ea15aaa896e1624973366b809b3ef44cc0099c83d3720cf57bed54edd756dd6c7f90861412a6c1804f054247d286a8086594cf491d79b58133da3067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94bcfe2e517ff62a31b19e6587aa0081

    SHA1

    d1134ce8a28094ae4473d391a452098b20c96ad5

    SHA256

    d7e0d70e826de373b66851dfe5ab96eb9419259d8dedc857d38871406bf82391

    SHA512

    596ac6752e30315ad9de1a7fcace878c6b4aca5b5ca9e48235064fdf25638cdadb533ecfd852fc7be943d523ba8f7eb32b2875912e454dfaf43c62c02ef3e6f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66232a62f0104efd8f88e10b1fbe9df

    SHA1

    28d96d753e99da018f7afe055b68a89892140f2a

    SHA256

    93ccad2a754f00dc36ae43c75e2e5ebf5ea5d15f7b335aaa15a5355f64b1fcfb

    SHA512

    f58e7df8c4a2b2abe359e0c33587d720bdc80adb732364f9853d813d47e1e50de5894fd286248db7c6b25ad13ed10aa1ef015588ab10202afa0f373d1b4906f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dcfd5cad8f7e8e5dcb86a801b8ab81c

    SHA1

    0de767c983df757ae0bfc263af645cdd991f8c88

    SHA256

    4adc1b644ae6e8b0e3fc95e1e012c0ddde9b01ac69bf0c227193cd4b088ec2c0

    SHA512

    e375d319985625dfb932b097a02f3a9c82b272b9f195e9742f9b0c85cfd355faaf011aeaed90d4ecfc44b56805ed936a4e4b0a090c6334452a407b2b393883cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    810796bab45eb1c12ec79501d859a17e

    SHA1

    37064c284d01bba9f592bb13de91e4a85b8b183d

    SHA256

    5a6090f0f476501b416c0403ae248a1499560b5a9b31c9e35764842370d62f4f

    SHA512

    5ebcfa7765756ddcbd3c259be7fde3001b412a00b3d677532246a69c89543824031760c93ace7be68dc9e8a7835da757c4e7af603533f8f7ac6cb79cb46fc3dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47a201f7f788e58d1db623dab9a3705b

    SHA1

    f1c77bcd4b527778417c73da7026f8d5aadffd36

    SHA256

    1f0389fe5149d1b4b1c0a7073ad0559a1689df10c808737da5f870476c28a96b

    SHA512

    e6d4549b116c8ddb2f0491b1400303fe5a3a774dc0a69cb8843637ded9b7e10fe55a3733eb1b67232d7b00cb046998f4fd642512592611d7ae03e007c1a2ad42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9ee8f2b10d76be4e5147c1285848511

    SHA1

    3ac6c9da862ce567566aa3c59f4ccc30d4e89ec9

    SHA256

    26e0daf55692893ce574419a284ac8264b4ac7648ae7f10c3390c97d3225001d

    SHA512

    ba07258a1f031dfc7ebf5e37c7fa9ab7ac7a8fbe877699a494ba42fa56fac463e87d0f17bf57b3702668b29a3978c7d4382e1c5e0bb495f8af94d2da411df729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52620443a34c3c2bafeb4c2f56d2ee95

    SHA1

    e82d99afdcffe9ab095b8607bea5774bf33b382b

    SHA256

    e213108afd28efc94e2dfe6141d78861581002d64d98e98d40b982fcb4a6d822

    SHA512

    263ceaa48e867958f283489ab8c5af24542210474119db01ab439ee23297ec12f155427fff2a29e648938f7082ad86393a5c667d00656f4abbdc226aeb7c3a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fef8d3791fcc189bd2abef04ee367ec8

    SHA1

    07c1dc136458d0e30a41df26faf5a823e954adc2

    SHA256

    909567799d3318ef858910941dde9ea53e0a8f2abad9db03f5e5347e36d3c718

    SHA512

    c948bdeb815fe879ea5b8a9c01b7fede6ecd5b7cdf338d51dd8033b5035808e07e11aabe44ab6f338d7dda1ee7edeed08e8cfee746edb5e9f2d48125d4446eb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17d2fd8851d01840dc453cba307660ab

    SHA1

    770844360508ddbc23aae0ccde9efad1b523ff95

    SHA256

    607f2f44eddd71348621e1502aa36a41418d59ec11cf63e97f9310e9d21147fd

    SHA512

    892645123c930db1efd35dc060005c06b2c48d739ea4ffdd2f45ea826c95c653251d41e5ffffe96ab8c3207081854ece125d91d21d7239114ea590351f3fa82b

  • C:\Users\Admin\AppData\Local\Temp\CabFA59.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFAF8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b