Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 06:01

General

  • Target

    eab7d839eb112b960f5c7de8535fb355_JaffaCakes118.html

  • Size

    53KB

  • MD5

    eab7d839eb112b960f5c7de8535fb355

  • SHA1

    503cea207a4426b33a568eb40979750a0f3b1084

  • SHA256

    956c4ef5b61e32630e176a908288dbdaecbbe84b5cf2545e9b96eae5827d6972

  • SHA512

    1410fdb18db74f6ec8ea47f8c5f5ced3f186623fd46e24b128a67669315d958fdac6bb43d1178c6720d4c8d67d6f741fc2e35e89754498e98bd1ebbaf1d515ae

  • SSDEEP

    1536:CkgUiIakTqGivi+PyURrunlYY63Nj+q5VyvR0w2AzTICbbXol/t9M/dNwIUTDmDZ:CkgUiIakTqGivi+PyURrunlYY63Nj+qo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab7d839eb112b960f5c7de8535fb355_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    483db3dbd6b780150019a461bfa6318f

    SHA1

    61d2fbca05d7af62839c80827df1e6abe08953b5

    SHA256

    002ac205cd95fc49312a65d328df33637c3160e155ccb571de2a634c2adcc7ef

    SHA512

    f7f8a1d1b0180ba434c28354bc89cb5f29ecafd22bb557da02b408140806b72d9ce33cd76a2550dfb056bce488bab13c88504b8551e129ba01f8245836afc827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80846268f89f5eb6b5c2800d7d673932

    SHA1

    feccc98ea5c8fd2e18d4dbdf86b2da2e7aff797d

    SHA256

    6043066a68a80a52c58d81be33a95102511966353190771457f8f3f5d4005fac

    SHA512

    69358dcab2ce312750285caa29b876b09951dc016e7e4da7019be2e8707e04c0610e664205bc2ae7df9e54c466d66778d3ec14b439a53824917e44f9696dafce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea6d3577a0d90d308dcc170cf9f08401

    SHA1

    b371a9b702e2513aac209eeda130c1009ee1177c

    SHA256

    11e8e5da612d62f8152da21d2312059447af9bfd09f2824334230d1115f45b41

    SHA512

    1cab4bb8cabd0df94970cfa00fd4d3bf12c9ee3ad39090a85e4c3a321f33f6751c4e629ee9fc073773dc615e30a791b628d1cd39130d92980f78d970e4dbf442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d8e3432f98ae6473bee4678ceb4c9f

    SHA1

    b349e0ed3fd3d6628b76fa9d98247af359f0c044

    SHA256

    9b34e0fb0716e0de5fb7e4d426b746317c0833d86462c330c51091b2f0a63271

    SHA512

    8b7d9696548c7a2d827ad7abaa7d11ebe4f52b76be10926594608ab87ecf9c4b01802826fa6c740ddad93aec982cc8483e05a06e0fab9d15ae171ad3a063d8d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4c05b9225a150fd8ca195670ed2069b

    SHA1

    33aaa6b14f41085195992d64d6c8351e37741c94

    SHA256

    89b80696ee317e472c1bf0e539a4a60eb548b021627716d8985738925e1147b1

    SHA512

    774da4f2c44e90c6d758dcad2219d5845fe09a8aa120bc4a2087264b19f4cfbf179382394a4f7e3f7e30f6e8dcf577a8032d92ca09bbe36c1a4ffe70a1a07c31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    837561e82a5690ff1f1cc3f5a3e32252

    SHA1

    0c7a23f4d9e777aa78c40ad69a5155345c8db478

    SHA256

    476dc50eccfb75ff13aa1376d3132b8fd8cd0e8e18b30957dd53cfc97735ca9f

    SHA512

    3d925ffa8c5a2c9db161aa0e4ed8b5e479775b1d42b754e3940a1f3fb7bda17bf349d52935ba806364f3e20ec25cc42b554e129ee05aedad3254202870371772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a10a5392ded8c1035e60409d7925a3db

    SHA1

    a621bdaf1cc0ec0fbc75bbbe6c99ae2cbe0258e7

    SHA256

    25998db6006e38e483784c389791c452dea60d65fca00be723e1aa6747a43be6

    SHA512

    a1953b7eb3652e6f868daf328276d24c087f3492fb8dfb1457795d080a16094681ca9ff8c059685c11eb88bb792b6196d91bd2f33370f73f31cd76215d70f4e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f870ed8b0b83573d35f33a77d31a38

    SHA1

    5c68c16729bfdaa433c830c507053cfce9bacb06

    SHA256

    1f8957dfd332d41cc3d277466eb28e88e1c544d30b567a7416da324b2f261157

    SHA512

    506b9b6f110e6de3729f0ea392e2ffe68a1d34cff607e7631f9131388aac9f8707d0eb3170afee39b29638bc6ab35b41334fac2a01fabb38054a24ef5e3f0325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d580e5371bed90f0805d4df1789e2b7

    SHA1

    d09e25a839e47362c011254aa4e77be6a8698be6

    SHA256

    67d0a9ee5c5ee1aa1fec14ad5c7a1b3f2740f24fadab7e8663f4aa002dc2d2e9

    SHA512

    545f84edab5a839892835083e24eec6c245a4e79ca99dfc3cb89b7e23baff211b58f21f20209735011ad89d07c736fda40c08a6a60eb10a9d9740da92d2bd314

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2fab8589cb2bfb056d57e1300f2d22a

    SHA1

    dbdca8814400ac63a9d4d7bb554bcff90fe9f9ed

    SHA256

    3307eb901081ec4e6c45881ab74039478ab310d34585cd1fe1d66f780ecdfef8

    SHA512

    8222c8d064288ea8cda637ed789bcc5635d7c93d1c710fa6c1b498e58f07971b8d933656b61d5c80743c0e7516048d81b5502d3d3253a2f052d4190d7b579b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4e5204743c5e58c812cb0627cd757ab

    SHA1

    b23d11c132470d6205156655ecb9e77348e8a166

    SHA256

    71a505ec5d1b992b95269cbc9bffc513d5cdc7fc5e7f02501848c80a1da60f4b

    SHA512

    e64e7bb4d1ed4f6ea0064fb580608c9035bb14946673f5171d14df9aa48b167d704c1fb8b888879d1cc912377d34a544b339527120ef58ceb4e8160112b51d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81ae8d4e9fa158ea09215ab50d2c9a50

    SHA1

    c7989293a761bd0c421439fb15e977712abc754a

    SHA256

    842dd4143ccf8d043d3703872a2a0b4a7a2cb9f02e1d45bfd4ea46f400ce3538

    SHA512

    98cc440ba9332bdd34e4ec7e316eaeb45733ed876f56721412f2726304eef47140dadf118bc2203b864e6a30307dc8f0fe68b408d7b3a6559f9854d7b07ace30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d75a1d15ddc793ac50b063b81184d9

    SHA1

    16087cbb308374a565fa06aac12d62e3b472486d

    SHA256

    fb24caf5d7168055e18f3baa68f37101f913b98a6b6063eac07ef5a2907b4c3c

    SHA512

    a37c9e04e0613035c2a9381f4a82a992704c68bac79ab34c08e148f22a03cb5567f449843d3cf80c151c72d781ac22b1491b7f159bddc06578a6790c2933f42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    482a3408e760f08c12c5cdcdb0e477c9

    SHA1

    c1c826013855f6b018cde0b7fdb41ba5901df89e

    SHA256

    9644efb6ac30e55c82180795d4940bade9c857e1ef8d99c9bfaceca14bd69143

    SHA512

    0571fd265ebc5e25093db13d0ad97cee1519eb66ed89e640c0ec180389f5434c000a0d453389b0a54cbdb5b3e140a3c8f1c2d0d55c7701386a0fb5c2fa56206b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e1a31e41a1bc77d3ead0d9bbaf8fda0

    SHA1

    5cffee9c04310e556b9c9268571c4882c2687afb

    SHA256

    32220894ed1d200ee2ac5691039239fd82b352dc244fbef7adddf3795996be45

    SHA512

    1bd8b302615287d1fbc376bd5e480d6b522146e316a2b703a8cc67d4cda82c6a7867e34a970fec0c520eae43d779faf6929476cf6aedb0b41c2a57d0e3399a3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8778aabbfa5323992d1fe3d674a7eb1c

    SHA1

    38ba66a874ab5de98bbf5849970059121bf60792

    SHA256

    815e19b0581612602eda1159ec0c6ce7f0d997d0e1d4fc011f97ae47ff1eb92d

    SHA512

    ed65b8d13cb4f7ba51b582864c46caf28cbf9f4e481245c8799e99690a6bf31a51103b031e7ac21ac57fe6afc1d92c2f871acef155711c9133b6887697a203e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eeb780d88f0c5fb854095810370eb5f3

    SHA1

    24bdb32f2c3db88cf1a3dca13dbf53c52f17347e

    SHA256

    a75a31959c49bedd736f98266f73202f414db78c84db4126db016de48a1779fd

    SHA512

    eb33881450f51a04a2a2cb9ee64885ae678eba441e76a41afba0d5daca80b3550662c728e45dd81089c93c267b28db6c2d01dce77dad1997ee83b7ba29d65dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e50a95c472e12784361c81a59d434346

    SHA1

    ebba8911f6b0e5cc796b156ef26931051ffc0a53

    SHA256

    125cf9afd93f29603dc5455b9f9416cc259b19a22d42575d0b1ccbe7f5514390

    SHA512

    fa913f423cc59c0ef5bf7e78b57b17450a454336daf799da395b158814b593d42665266bdc5ae6db21ac499c371ddf0f7bcd612f8b2b8d153976a11d9f46a22b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea6a4fdfc814a74359f63f84d27da029

    SHA1

    194467599f85c62709f4e9875044ee575e50bbd3

    SHA256

    8bf7a7a7ad51c7f777dc5c964c83b470943f76b6b1057528f30a554d981f85a2

    SHA512

    1d27d176667e23d7c8611ec00e37682374091be6a41b7eedc8f3baa11a5ac86e3d685af6b5dfe2b2bb8f26035f9ef03f45793f60780db578a26a417a554dc519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c224a2f169c18bf6b3f0abc942f8bd5a

    SHA1

    45ad7b0ef195b24e7b9fae489fa774d72b062fe5

    SHA256

    bbdce8fd3bb3024b68ca98438ef546c20bd4fd16d0ce840181f857c9b4b4907a

    SHA512

    adf6ab880db0a08d48c4ee8d379c323ab42180ee62cf290dacd2965cb74d6c5f48f208b356a3974f9cc868fea68fc26b70fc3aaf460dcff39b4c08fb019207da

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q0WBLVJY\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab368C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar36FE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b