Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20/09/2024, 21:57

General

  • Target

    ee8090c2dc63e2524624764e0421109d_JaffaCakes118.html

  • Size

    94KB

  • MD5

    ee8090c2dc63e2524624764e0421109d

  • SHA1

    9cb42e253eec3de78abf06dfa6f05d04937e49eb

  • SHA256

    efc14a3d52aa0f3a1728a8fdc53b17663d810d1fbe566e057ee7f7e7df9f80c6

  • SHA512

    0356019da0e6f35a92e822a6881f8e61edd0037e7d5b86dc2c246fb785bb9768838e6f956572079002ac88dbe35584724c6d407b71863fb23f06088744ac8c84

  • SSDEEP

    1536:WMLiNcp8YGm1Evza5fFLf2pJIyFL17LcffKyLZ3BdkrY8mgHC+qpEyW:WAiEjxBdkrY8mgHC+qpEyW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ee8090c2dc63e2524624764e0421109d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35fdedd733d7a9bf5a62b1081be90d4a

    SHA1

    d995f3342c760ecd9abe0aca54ba72065aef8dac

    SHA256

    5720be3e860d8d8fefd9c45c48bf978fb0555c85434a8632ce02896022f440de

    SHA512

    1f841b05d2b26078e62d7c3a29a68cdff24effea7070360a069ae9de74492353929a465d3a21e2524fd4e00dd6992af24adcd0e55fa972ff1f9a4cd3381dd42b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fa2b761bb81518c483703c49a75434a

    SHA1

    f0e1a55a063bf5e35caa7506b60175d3751eb748

    SHA256

    14a3c04e45deee0a76d04747549c08194d9dcea9ba11ee4581783ca1c1e5e071

    SHA512

    8fae1d99724c875e0bbc378b992d68e650c0ca157b134e2ac430b0da18c52965540c5fc2ebc06fdc9e3f9a059766faa92132bfb5282128faaf769d2485f3e43f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af35dd47238c8ea37c3493b80dfddc75

    SHA1

    3adb91b224437cda7ce2bd3e624aeeca1357ae3f

    SHA256

    86faa756ff14c244ea09d5c2c5562eaf91d8a0357396ed9696609ab090f8bd78

    SHA512

    6d82d82d6da83d0c10d66112d8c557210f13cd542095b0eac25361ac1befff402985db76b13f6f3be213fe2968c47f53c695f012d3528134ef99b118f63f636e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    045fa61b8ea7bb3300bfffb0d5ef6e4c

    SHA1

    92350ee50177d7027457acd8775598977f64be9b

    SHA256

    f2bb17d24b5faa437aaa5f849ea4720408f0665708cfd0c8e4b5dbbbc974dd54

    SHA512

    116f7e30eb57d8c30cecb0ae8d68a9916d97917f40f600f1db283db186c876a885255febf3c63e311d732d89ff0c775858c272c3bff55666ef37dc4c529c83c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c1d9e229c6f031a74f66a6deeb6aac5

    SHA1

    de7dfb94e2b9b2c475b4f8b1c64fd314b09cbbee

    SHA256

    74ac76ec80905d13673c5c4138c9eda8ca0491ae6486f1c2ba54ad10ddf8c9f0

    SHA512

    03cc4af1e566ef5c45fd8de9006631c85d5b563b0122696102bf49972ab02fb1bb8bd1ea3455b88184d42a921e39f40fb363e4f65d1576ceaf6799e545841585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    034d430a2e871c0ad04bbcd8ffeb8825

    SHA1

    0f3c20a9cb3ee6dc0dde610192d637337185eacf

    SHA256

    320737179068df5fbed0e43c246d18aeed39ba07f549d20d353afb7721742bbc

    SHA512

    35aeb6d1adeb5192ada0fc5cb09b60c956cd605a56a37da92db2ee85a0d3bed25e487b3c9fe8f71e247d632f2072da9efee7b86d9c78eae484d5c3db00651834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    065d1ed1ff7df516e07d79bde48f457c

    SHA1

    27f89c740d588588f3dd96b7701e66cf5ea7296f

    SHA256

    82621a1545ed4b5c2dc0ab76759d9f9bd3f5f1d2d1b55d4a4a083e1c75bd2e10

    SHA512

    7678cbc4630239454977a04a5edbe0b65ed67e6726d6a46ff78bae1b7f451957545c5af382cb4f204bada2dd7d4ae71520c51d34e9caed7b9759875839abc311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70a38ef466e54208bfbda4b65729a8de

    SHA1

    a34e00ecf133b11419eac5b28d0cb4d093a29da3

    SHA256

    66d453a30355124662f8b26e91190f5e5a4c9f352b37fc461f8e60e80f45d1e2

    SHA512

    5719ba2886ec7c025700d46e29bdce408d8f855a360dde461c4c6424408a30041132c32c1f286f9f87037ff74c4555ab603128f705e22ca5dcc9881a30406f30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b570ea1090ba35f780dacd029682ff6

    SHA1

    c281bd9785443e9651c4fdf237cb9a5e147eec3a

    SHA256

    1c825cadf4636d7f1751adec29a3b9cdb02906904feee5aec740bc98acf713d9

    SHA512

    57bf84edad63965ba9412c35d55ffdd9e6e2d0d39671599fbbf7a6bce2d3f044ffe2e7ca485f5d4689c52a981d1db50b88853891a99846ba90090644a9d6d01a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad65650d7fa5a839a5974abe3427240

    SHA1

    e6f5c22c09678ee0acd10fb0760116de90873ad6

    SHA256

    8843fc126467bb65287d3a73b36998bc9b4ded01b5a3a73c58a518826be1a38a

    SHA512

    22128784949c5875b3e074a75c1e6e655150c8bfb3daf4435ce93a59e59a48c788200435d6137bb66de4abd0cc34fca4c2c65aedd3e4f7bc00fa99eeba2410bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09d9dfb33b2ee4feadd7489018c52c8a

    SHA1

    058e22431bfea3f7af6c25c58696db2c920f8c78

    SHA256

    5a3b2374fe1a807b7f8fec5f2b922e9a9c12c5157856cbdd14e4060a1c23bd9a

    SHA512

    8d90e7efb5229ec1f65f7d1b07858a5b4a71d4e47b2ab9e2c8b7cc917daa4a026bd4701ed2e83d3435514c15289ebd8c0c020c83767b2fea13227151f486dbad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06ab700e4f17af08dc932eeca385de5f

    SHA1

    ae0b971d03f5e8ee939432e5dfa400f688e05814

    SHA256

    5de597cf095277413c9d4cfad40cd8b271f984d2530a3add1adc91aa28ad1156

    SHA512

    7a48107c9aaa7370a4d9adf0f8819acc0b73bd20b63db9c1e66f28f8bba37bf19ad206ff4b0ba1f1168f53c259a48f703150e4abc2ff836fb9ab3df06ec1b9d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3027063290bcac44cea77da15ee3708

    SHA1

    d3f20f593ff70884f214a4b04cdb27bb5292eed8

    SHA256

    530d7e53b82e396fead22d0e9a10f2f6680ac5127bb3afc00a932293293156c8

    SHA512

    10bbb1b86bb100f5b1a93b5c1dcee23b2ffab37e413205be514858a03f1ceeba9c2d9f6760596b7f57f26610c48c45080f1627a2c4c7c8a210d1e498c6f7626f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dd4bba39a6113df691ea062e3b3e5c4

    SHA1

    594f55bed572f6ff61e4466fa859d7e671e92f6c

    SHA256

    e9efb7934bf0495699ab56f24ac5f418ae373c2dc5cbd706ffdc720be3bdcefe

    SHA512

    bfa36817680f180446d99493ee3c180a34de6642b681f674b053f11eee7223f35efce766ebaa2b9e85dca1ed89cb5483814bdd9ddbf549e351f14321967d410b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f64203e47b8bf54217d98fafaf2a6330

    SHA1

    64f00c2a751601b9c1baa8bf99aeb3809be7fd7a

    SHA256

    c7731058f2dd683f3f950c9bc0bfe2ceea7e32c23277c863e5b6dd9339abf33e

    SHA512

    ab36ead3ec477df626578faf171c33752e22c111815dd2598a4664f1d8c3f5e2e4b1ffd8b7d66f2bfe1383d33dd9ab21a5ec3cc051cec1ed5874548c8412eafb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bc9ea87b1c5e3b351803fd9198d39a7

    SHA1

    f94fd8a153415fa2d4fef4a6eb3e8d23d308b653

    SHA256

    5efd2ac2cdb8e7ceed5faba51de67c4ea476cfd2c235744947480f82c55d4d3c

    SHA512

    728968ff241c447fe798a5816e9ccd670708b3e6c9ff27c9fca987f7c52f6bea6c38249b239aff4931e436d00a2ae49e49b2367da29dcf4f8324fb17508c30f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd27e89fd6d64896aaa584a6f99b0823

    SHA1

    890917928374bd6473a5a1404408a6179f0e75ac

    SHA256

    1efa282c80bb5713b2bee85b9386339fb81a8d3335de7f312a8a76b20500c0b5

    SHA512

    1e693b0c20628be0ca682e1b7c6c28d8f65423ea4b20ab1ecf2a5a433c5b8c7d260567c928af4def113eedd16524b4d178893af34b432ee349b5cd764a2b2d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    455ad55ac084b856ee93d384b5cc25dc

    SHA1

    ac0b555f19ca71b116a587f717304be43a304a8d

    SHA256

    e9f0e9f022e1e4455419654332a7c852f05e932f9fc1be54042d7dfedd236290

    SHA512

    016e8363adec4938d064ada9e1d9ec5b6b8a43af13e54a3d054c63afe54855ffb2501712aee48b33639228a390e4d31fbefe3be7680913db2423490792ecb5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26c5297f5e6ddbca9bf5004e769ab795

    SHA1

    8db88d94fbf2eb7be4abfcd69eb5fb4a510861bb

    SHA256

    8815a40f42ed0dee2ab1d9271a91705053494e1ad364d64022ec44d31fdd10d8

    SHA512

    17f777a092d8e86991d996bcbd7a0290fcc1da83f2f1766c6bf790cac4edcd36ea4258778c8fc02ef836b5f1db880df773e43cc1f9e3411fca111bd409849cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fe42eac9308cef25d0a654aff14b2c4

    SHA1

    5eac906768ad7f2a8d28ed7eb54f17b514985d80

    SHA256

    7d4c041570039ce606cfbbca26f7207b194b9d6bfc92986a5a9ac380a672ab66

    SHA512

    335e2ad24c2cd5d083638b55bdd82744478b20c7120743ed5caa13df0e8308eb176bf6d15e9ae382bef7e101534e1712746af85d272893e4fdeca11d08c7bc95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    256bbb46482c1abfee572a7587247fdd

    SHA1

    4f3a2a5678f19bb0e8cf184e21e45a6f7c5c7fb2

    SHA256

    3205ce380b6fd190f75ef12d31b1beabc97b083e0519c2951a78585e946a1af0

    SHA512

    d732c11eaada381379c009b01b484e9e96e5c4429423dd4496dd11e6049a8d4547c17fb587d18dd2f4bfde8ff6c971ce70dcda9d944fc5cd89d89f9a2fa054ea

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0I0VVMWQ\wpml-language-switcher[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabEF41.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEFA2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b