Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 10:30

General

  • Target

    ef99bcf6b17aa1207229a13d99a19c42_JaffaCakes118.html

  • Size

    98KB

  • MD5

    ef99bcf6b17aa1207229a13d99a19c42

  • SHA1

    192443f33e4718bba8bfc437edd04df000ee6700

  • SHA256

    d5a571262393a5ebcb73d3cc14b3b8f6f36c8528dde7f4fd8f40f94dd75c42d5

  • SHA512

    5a5de20e974257e52e80efee820aaa25f85da4e6840da1616184cf0b1a6e82daebddb747215606b50f1f7343da5e72fe9f3b3d7ce9577c363e69abdcfc504be0

  • SSDEEP

    1536:SISqezuihCFiuiXiX74fELm/C0zZ2wQzRSkFZWJRigGEFhH2csw:SISUiQiuiXiX7oEa/CHTzR1IigGQH2cF

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ef99bcf6b17aa1207229a13d99a19c42_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2408

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcb58b85a9a36b15ecedafff563c5d25

    SHA1

    d940cab1ea7999b7e5a5a3f5fa0d849b4a5300f2

    SHA256

    1b5505cdd024e978d283701ef5c459507f0de9d2f48f2e618d76d46063c3d799

    SHA512

    28d46ee699ac418a058c599f328417c3dfc3ad37b067f7092d4a0f065b1225a7ace859d3be649b866e411c58fe812ee204c6196106ac880289595d6eac67e947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51dcea68440ab63238c6c30449db96e8

    SHA1

    6c5befeec37406bd9f7f690075c63b7fda1c31e5

    SHA256

    8415a16849eff3122cdab8b4b927ce855254cd6dc119228e4cf6484f6d896e14

    SHA512

    aadf100b6a163ef47b7a5288252e8a765956b9576740cf7df9bd8b1e885821f7063b63411510f043047f976f2b44a8e09ff3e67ce82cf4af16eb22b48fc0dcf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b6d93672091f8843217b19a6b278a1e

    SHA1

    271b02240d734382dac208d61869a59175f7c880

    SHA256

    dd063743d1bf1f9ad699083ca3a3412073b2fe5ed397297f65080dd783362dba

    SHA512

    1a12ab8e7667a0a052fe65493ff47e056c1d4f36c772584eb0a993b6ca9dc7d3405e7bc644e6853c9997da72b82a0d2219c3a31778af64bea388fa32597367c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c38dd7a8098fee32ebff95ef0d43a5ae

    SHA1

    e21e13ad497676518a135c49acf20b9f1ba79fa7

    SHA256

    493827af2f5e8669e24a286bb28984a24a1d1c3ef852c38cd94950f2f651400b

    SHA512

    c651b78ba2c821d9e034308a6077f5816a198c6354ee872b1f74cf1df9a88537822450275b9c516e6d21a21c10f7b67caf0a62cbaa5c571747984cefac565196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2bd8f1428070ec0483a0249494ed0be

    SHA1

    f512d87cad6bc7cbf1c161c96f0454843fcf10ca

    SHA256

    b05b51bb7e4af703845893c16afbe7bd9c040021766dc0e555efd27fcf851c36

    SHA512

    251efd2f02c374d8bdcab41b4ed4cea80e7f6b01f61fea01161399f51d142b0dd6818dd3e744ca08db45efb16b11b094c1c612813aad4eaf11e6d68cfdaf9e45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9d213c2b417759335e755ac854ce875

    SHA1

    dfa16557ea992185ef5670a16e176d8dec05bdef

    SHA256

    0a435167eb6b47cfcc1c48efc2b1dc7480a28aa769413ccefa6e69ad2bc1b9f4

    SHA512

    5503928cf5853583c1ff5814ac1149ced87af8609067d70e2a0f7e8b446310af6ac15ad49d50574795aaa4adf05e7aa73afb6c5b822c7b566485fd03bb1a089b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d9e40fa07bc93c9eb6af8cc1361d00

    SHA1

    f68d8f9a8d43b3f3302aa053f89ae23ad30f0beb

    SHA256

    acedb5a6cb34f7cec49b17ec36305e78d7d25f2faf3a7f66f1a3e9af5be53c47

    SHA512

    0ad11ecce9b4354b51321739b4927fea1db0af57c24b917cf6728b8797842846a9109cb6ad3360e2afa1dc264c960da2a9ab6a3cf91207f5c16444708249f2d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cd18732c2436f45ff455de50d8fcfe4

    SHA1

    1f6f8aae940af29a810412dab07e911de5747823

    SHA256

    64c812576a9280125671401dfdbbd2139e580e694d46f68d1fe24701893ad42e

    SHA512

    9916450a43ebba879c26cbe6999ecf8c3ceee96a97bfe14385866ae5fdb80fee363f8455b53cb268733663eaf445457d26d644704a030e75d61fe124e7fbbb58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81035aec2eecbe7cc1d8d81a4d018d90

    SHA1

    78a87304b52a67e696d79cedefbbfc9255927e69

    SHA256

    82c69cc0dad72c77f3b8eef1bfce84be0440197872388e4b88693e9c9a3b47a5

    SHA512

    31c833738500f33607e78eec4a0ae1fc01ce6d5b7f129567594734aa2bf009e49d5c3c1649b3617414f811c8d527c6b2c67156ae6eb81e56c5e750c6102b9298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad1136f0dc2d919faba16c8a7a828687

    SHA1

    fe5d038c33c4d270a0551e2c95e497745ce2658e

    SHA256

    3e70ac3d379f52bda143a0376c97ffc7252702464506a73dc99f4a4d3b7935e0

    SHA512

    da4c3d516fe8eb5628bca0c36d4d9ab00c642c168cbd90ef69df82c529a8741aecd07db87bd29386c70d4e05f047faa1889e0d8efe75cbd3b3d06c07166f893c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613acba0a6fafbf8333f904c3d51276e

    SHA1

    70f3b842f6285043c11e092431340e1c3c53825d

    SHA256

    4ba87284f3ec96fe3f9a966ebf315b1a45267b4581f879427e78f1ec082afa5a

    SHA512

    57074b397add784052cc16e6d0f800d961f8c6a93bac965f3d554df6a4c4c10a2216b7313580b2d762299ae117ee2eadf41771ff06067b85cb583b6efdc803dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8098e72dbd308995e21cac2f206a5829

    SHA1

    f9a5e7b75cb56e0d58ec1bc46218ed9a89b97bff

    SHA256

    ec24e6ca7c454541ce4ba16d6cfd88a9af696b3209f760e3e0e3949d649de327

    SHA512

    5117ae0a5d4074186f2c0be551e350a22d439f9c010d4b9326d3d790f9a542b058ecf949543ebd6e8ad17b8f2f6c0c4ac08a06a30e0ebedd2f1df437296571fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b5263cf13f90be7712432118f5e4f6

    SHA1

    142788d9257be332f19a19d01fc72eb095e112a4

    SHA256

    69f4a8f6ca8c186e80075a81aec7a4ee8ae6ed3ddd115d717459fb41268f0a4b

    SHA512

    b484dc405c9829002f8e9f45278e6cef31116462f6d4725180cf3d1ea38089eced1775193446fabea175fc849b6ac80bfb6bb3de721e963a59ecf281086133c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ecbcfe0b6d71c7edff4a1a182c5cd8

    SHA1

    2df0c392438d168558af6d9bf066af13f0a461c4

    SHA256

    18a0fd8fcf891be428361fafa526030ef33316879b894e50f0761cdb1c97e207

    SHA512

    b74508efdd68efbd73f0da296ebb14e32fcf20f843662f72a70ca9cf5bf9a603f8d339b584c8afb4d8960cb3655129d83718dc19f990800ccd0204e0923bc0db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f953dc3884d39abf28f34a5fcd58e323

    SHA1

    56edc3bf71db6688c506d9b0f064a1ad0925ff9c

    SHA256

    c4f87c45f12c609503a29d2405848a29ffc75a3cdd581f80eb023e65df9b2a4b

    SHA512

    fd06ebc3490bd58b73aff9c928bf5f3321748b2493a120006d4718c5029c470985a15c2e9ef285a5dfd83e9ebd5d4f87895c15ad7683b8cedb9ba34a57f4380c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4e482b9ff17cf9bfebd106fffbd9841

    SHA1

    82b1d08ea8d0c3b6cfeb9e0b1edcf0781c244d97

    SHA256

    0fb633b40b4d506885ab4a0a059e14e6503c0bad2535e8f9f2206db9a1bc9fbe

    SHA512

    acdabffafa4d886216aaf2bb4532713adacea6e1056d81360c768f013e42fae168255274b7df4b8cc89334558edd36342df5bf560363740a213b7cd57fc35e59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52989df8acbdd35fd98158443e1a901d

    SHA1

    c41744e52ff9afc21090d955914125a16c8af28a

    SHA256

    0a0653444ed256e2f0bd511b99663d428ffb86c16b10a563de75992cdd143e0f

    SHA512

    0767bd6d407bf8f896babf0e62f666b87cee55dce7b02efc01267c24fd2af6a3067f7b2b8b46949381b387d7113f80559a3d10bf84202d1a65f00ce1c948c1b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    855f10a51483bf469adb7e83259a06f0

    SHA1

    8ced23e4f0256df34f341d74a004780fb4d7fe49

    SHA256

    fa85e41c73e5873ad8d85b7f5261001273b224dbfddf48aae2deb37aae0aa0d4

    SHA512

    da6a9fa872c432f9bea41a2a7629bf9878c046fe51cac94383afd64497acae49167eec097efc186da6c641b0728efc474307b77af69c97bc177e4b4cdbb3cae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c2329cdc8c1b5e98eec332b6c27a798

    SHA1

    2a9f0765f8719d1b7e80e53922a53c3524c8d20d

    SHA256

    51fb907f6b7c6257a5f5bb180973c4a04d95a7fac38b5fb803622e3260a15417

    SHA512

    2cc73b84f46784bf51578313b6dac82e233702bf7ba39779f41e3c4f0000757b0d0817227279095c0d77a06c47ade3897fce35559d349975753434faa17edb2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    311a18a6a14fb82e577e8e7d97603fa1

    SHA1

    38330e62a08379f649b71d346f08ccafac3bfa33

    SHA256

    c6629ed7580269121a2d1fe10b91114c74dda60167388c8f2bd3b898d003447e

    SHA512

    c4a5caa8b717e2fb8218cb41fbb92d29eec029e0dd3e4a1cdd92f6525b892bb011401abe3b0790119539c7159479c0a2600033d780612ebc7c5b58d49efdfa25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20b2d5fe48b57ca0b0b23b8e4e9a2cdc

    SHA1

    5ab70b6ff024a6fbb943a0a50130eac6769b5c12

    SHA256

    0587ceb7b2848f0131890cc1362f238c57e5ea08a32248cf0d6c65971c108974

    SHA512

    7ef64bdb57cca513d74456d66fa71beaa700646587d1c8cf389def96f50a232d806a71848e76daee32d6362585a96ecba0a52b27a9812cb025103e19269a8e71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    738cae41e2d43833d8c2d94800766b1f

    SHA1

    aa064c84439314b79888c8743978c53b63294096

    SHA256

    e49b4f27afc13b8805d5f8d1e3d2c8999a8f1871cd39cc8c19147afb1fec10ca

    SHA512

    747122f8c4db861e386a91fd7913adca5c18fcfdfe954442dabc85c09dd4d621ea997b5e12ebf4e66682a1f279faec53d23656d0a0a310d3444dcb7aec35643c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d67423ac301260f6d7f9412e2c45ae0b

    SHA1

    91820c0063ceb86c6387bee3babe0f0f9bbc6356

    SHA256

    b2ba172ad1a4e5ec54d1366506e7ed0ff6b306ed80eb61ed2852a7fd5752dd8b

    SHA512

    18b6d26b97d81c27ea43181ac930d5d67573388a0020cc4ae7f8132798c8d99a25636d3dd8456414af9f611eaef507600a51f4d20e5aabeb6e1343dfb87b26d7

  • C:\Users\Admin\AppData\Local\Temp\CabE4B6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE4D8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b