Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 06:39

General

  • Target

    eac6b90be65a41d4800eb82f1f29c3a7_JaffaCakes118.html

  • Size

    13KB

  • MD5

    eac6b90be65a41d4800eb82f1f29c3a7

  • SHA1

    ca50869710bb4a6dfd022e53ac8999e95fd6b833

  • SHA256

    456b17f9c29ff4501fd7609e4d00dd0d023b1c0aa92cc2672c695a64db635cc7

  • SHA512

    2f4771e77d2e82b0df6e134f4086c5fe0b12e09a0804507b1206911f3bade0e119b9bfda993e3beed7df849b8ac90bceabaf941be9587679c7977c66b51ae32d

  • SSDEEP

    192:PjtrdSMuGZ4mBUfrJLNHHGne/a1bdBio9hUQGywjAEKDUgI5PlERGro9VopZ0:PjS0mTJLNnGney1bdBlbwB47Z9CA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eac6b90be65a41d4800eb82f1f29c3a7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5176a5a9c9f96485a7ab568e4015bd3b

    SHA1

    cfa0fcb00c70819683f0514cafeb8fed02a8eb6f

    SHA256

    e40d2f0b91781c83c073b3b8f4698987d37e85dd7ae831554d3ee4a0dbba19a6

    SHA512

    b7e65323071c9b955885d20a808194ebb4b48f49087341606c78836d62bdec3f03745a43713f0c271fc86560937959a2d853f6d01a18ad0ffda40eb3034071ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f6c02dfff057a469f7696285b474ce3

    SHA1

    3df91f826e3ffb5e5c426ea0eeffee6efe502bd2

    SHA256

    c899641be07fe255e2eb862bcdf81e228f120bf681d1db553aa44a3837a180d3

    SHA512

    727e48a35c364b39c7bdaf2b711297d50ffd2d8a56f7ec4099dcad21040cf10125173806c6842a677de29d14e7a907f72f038577d06a2cdb2f1b4a5e2980f3bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6107f9b84e71d137ddb4ff34f5481b0b

    SHA1

    fa11ac7fbac49081b1b988ec41af7a2d12f79ce2

    SHA256

    635726c11fbe76a53d2d329d06b12f69ab36b3847ea080475fb326f312b168b4

    SHA512

    47f52dfae2b118c2f06c0431f4a64ec03533222025dde26e0bb96a2d1f01745f48f2a31ee96f48b3ce2e53d0a40876a20fa7fe3ed37831ae0a27d5fe6b95ae86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98770158190c529688a32ee32da627d3

    SHA1

    49a3a385eba95669cc4c634fcddd30f5a8125f3c

    SHA256

    fd6361b6a2d7a85c0f7b4720d13c33c270681243bd88575dac849cdd386dbcb0

    SHA512

    944cdf96b2c3f4ddad3219267478e9cbd73e3fb1de3424f8bede71694c8d7127cb6094f1bbd7f2c9bac7d6293cf4875d57ba2351b7fa0b02bb871f4f6c13b4c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10cd8ab05bdeb66d274b678c7a06c6a1

    SHA1

    01216d42b45b142fd59ef897f4aa62b191a4a671

    SHA256

    ade66f21b50880b7ae72622faf9c7ca78f913a6e18a313f826f895092c1951a0

    SHA512

    b51038e2281ab86c1a59708a7e6b5f2c58ba0c8f433c78b66acfdc9d6d34ae6dbe7ff67438276e4a12c4cf58efd7bbcd35fd870fe35549b59a79fe092d6ef324

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb6848024bd9548d0354b37b99a10684

    SHA1

    4834de9e70b35daf97b18cfa8bb28978f6474dad

    SHA256

    f028e16e6941a276be1d1dfaf2b76f6db535790364e864f383a36022d9c52218

    SHA512

    63f576b869657a6bbe9fd3d9ba5cd8c865ee6832909377fb9dcc2e952aaba634eab90410111d31fb35534e88406fb739cb7c260c762cb588a8ef9f09b11443f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b8129160162b3f36f34125d709c2a9e

    SHA1

    a6f695403bf959abdfcadc98ca21c1fdd54c1fa0

    SHA256

    351166115bff3c016fe1d823c0e0e3d6f86d969be3de1df4e8c311f1d85fa924

    SHA512

    2976a1e8af405b00b6abbd333c228353c8e33c306106fa6ccdaace7f581d12f2466b8a6bf6e7f058d119079a5da5d1be4d8fc26aa4c269cdfa21daadcbca8da0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d043f988c81b0439ec1572e90b13b57b

    SHA1

    02a43efe45dfa54855bbcb3b4833ff097ffb5a3b

    SHA256

    780a5f4b2f0144c826826c6da466812ebef1e54044cc8722219521a2feaa9ca7

    SHA512

    73c8c958e8000b541f406003bdebaea6ffa6bef5e8a886200289d18feda075a936780910a5a18ebcc918eb75f2a95f7086988902e4cb9711d2122d703134a468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a22309996516cae444075019af799b3f

    SHA1

    d6de4a97a5dec55472a65a9f1a31d3ae9684f9f2

    SHA256

    a04a32ad2f6cdb72466158f7fd02b1a8d01c62dd006669a2c162bc9736789911

    SHA512

    7091c0ea5de660145a3e3bb3ab247024a0228d53d8fd16cc43f0e8ef05fa2edaa2b86434c01a1057318041c8aa71c788301dc736cde748711c878089c470d2e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3350f06497fffe4f8c1e4d05156c3bc

    SHA1

    32d839f7b8834c327fda341c6f5dafa69dd7987a

    SHA256

    41b662852732ddeca3f6a985be24849f93a4c755672b3da15230f5ceed08d539

    SHA512

    3c4fd883c0957c4dd12f516834a353ae41af8ae7e58274f40fa130c4bce8d6b238fe6243ae8a0172ca97e767d8dfe99762f0388caa401df4d9af70ca6cf913bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5e63d7933a82ca3bdb3c7021aa2a513

    SHA1

    0096711ae939ef758c175cc0e4573e207c99c72f

    SHA256

    e32a84ef652a60106cec4f35fdc525493f4a6ebc26f763b7cc24c8153d3a0c06

    SHA512

    739169818ff0dee1ecd2e35b126b071168a66b9020f1cddb4e07f8712ec22e838a2c42c7f580f1d5b9983da427759b5e256883bff0d9dc61352595f20e8617f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35bb24735a524cff54e94cd92783a3c6

    SHA1

    289c1df4c4fe761b5831f579a55cdc9c67b3305b

    SHA256

    816d71ed9815cf8111173029caceba144a974a33425862383f0c5920ef7313cc

    SHA512

    e9bff3fd9e809a5cdd8b37eaf0867348de771aee619e72b15c4e0aa24698292cfa85e712eb5bdb791c7912c0798e98e6d8674a70c19bd549450b60c2917e84d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ff00e9d80ca58f0f4a0f27dce8f6bfc

    SHA1

    8a63a5ba89ff5effb16a22e5886edd0fac9c33bb

    SHA256

    68987c2f553bca4409ae350296d96431b9ad4eebe6ac1a61936371e7615cd596

    SHA512

    c8c22afe26a2861c70ad1f8d815335a6fb81be3f83d5cc20235d855af064f43069dd8f8ea6f2531f3d921b442a7645c1d02a7531fb8afe582263cb58cd2e08f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6726c9c3e25de0b50ccccaf9c41f67b

    SHA1

    f9fd4a44ffa2bd9ead8d823f6e00dd90fa48d037

    SHA256

    aaad0bda7de3b9c6126a8c43e93d3c7f94a4b91570dc14e6e1c5053b7b220ce5

    SHA512

    a0c3afcf4b09e5bdfd4e44121e6e229a9d098544cdde7568d74c4db395dfd177b901f127d29e612f9cd82c916212e2bc63a9a081c8d460e4e645e14e5cec2e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce1142931fe423ba72fcfb112d1e8f80

    SHA1

    71c03937397bc2166c72b2932dcb82ac473d3842

    SHA256

    6a7a15e3c019a57aa782627b2492a8fe8f5bd507805805c0b5f13b37fde759d5

    SHA512

    8ece36aff5b80472999f251a36b8d480c6abe290347b8c0a2d07549a040c164c9c462fa5fef2e4ea52aa3caa1e07ea26431662334d429eb37d1d8f42f16f319a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1a8014399dd2c7579c6de252e9ded20

    SHA1

    1a79a844225f2cb5651c695343ab5adf7f972bfe

    SHA256

    46858fdc77d9df581fb08a792cf728aa89b6139c1592c343ebfedfaa133eedcd

    SHA512

    4189e5e1cff63b3d6f01532c9af22ac4bb77d02efcd5971f25110aaf6b0741ec9fb9317f2b08f3248fbcbf8709db28c6eeae9c400de56342c1c5932e0def28d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c06ccfb64b7b1f0a436f1b1c21892999

    SHA1

    8178e494f21a97ab7c429ab5204650b85a8e24d2

    SHA256

    7d1a58498ed45ff3c650bfe88ed49248ce2a398d1cd16d2937cce21124563e3a

    SHA512

    54dc443055e2b5a085d063bd4017aebbdb911bd4e79cf865e2f878a089ed0f9107fd4860024f31070d08a4be986232a1e805dd058f802a53da6beb93843bc06f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33dca2a6fc1573dcdcf0a00ed7125439

    SHA1

    73c5fab00f628e859e49469cd1eea56606f41c81

    SHA256

    e6fe9282bc9347c4d524bf45875fe936e4ac8806315674a4b030ea7426881d9a

    SHA512

    6d894537b36a18bfcb4a50464795efe8bd011ea106170eaa83c40ab0b7d715fa5ab7b1a4691a2feaf88d19fe3e2e525a6e49bd80d872b4616e5e87f7844a2e12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ff61754467544f79863a31a7dbf682d

    SHA1

    10e60f0ea364faf1a8c2e4c6d282f6bbcee89d17

    SHA256

    51e2ea503ea8932ee65c9ccbe87f0256c4d640ab654dace84ccb71d7a8694db3

    SHA512

    7ff7e461b7e4e32bc7cc659ceb078c86d6c940b17d442022e2d5468494a7eaa1b6ad8d8ab6c9a67f74005a780728b3d630462940c2d69a14f7e46374823cf776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39b6a3169c9c697fb6303ea96399bbe7

    SHA1

    b203ca7bc183cdcfa3603ab02a8ad10c796c7ce7

    SHA256

    6ce6286b25ec006d451a15567ec74e0f823681e1dd1673f1cdb59c29c69b32a7

    SHA512

    9c097c20bad1b223063bd486030c74d15e1ebb122ae24a49d72e9240597fcebd1aeb269534f3ccad2ab744549a1269fb2e028e6c2314d4702952b47d00c2c2e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7010d201cbfbd84a06ba72d155a9a4fa

    SHA1

    a4e9342c3f49a4850c8c0df7235b782b7e29076a

    SHA256

    e417b7606d61555434812d61bcbc417c9977eb753a0ef2dc277343c5e5396e1c

    SHA512

    9bfaa7607346fe030a37db8a69941f94c6c88d908bbefec61f9227ed17d43770bb5f80e429984bff54aaaf5803cb949346cc71029b0015e0369e299ccf9933fb

  • C:\Users\Admin\AppData\Local\Temp\Cab1BBD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1C0E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b