Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 03:01

General

  • Target

    f9968c05385047cb42a4a7a667c38463_JaffaCakes118.html

  • Size

    91KB

  • MD5

    f9968c05385047cb42a4a7a667c38463

  • SHA1

    dcf044f212ae37d03cd06db29962d71dcd7c31c6

  • SHA256

    3688a1779dd433a8b11e24e82949c557057f881e039dd3fd1dcd61837efcb5aa

  • SHA512

    7e0daf02b3c03da72a8873b018e21e8c18b94d88a51564ba225e02ccb9a4862325d5efe2a1f04b64f470500e34ca3c7b9e040cf7a2d237c69a28183a801d11e6

  • SSDEEP

    1536:kgkzaqviy10VFhsEJOiwJ+IMYslmsmlIXiQCGGv4bWVZ9/1liL9CAYIMNAmC9trU:kjzBfGOTXs+rmwEMNdC91Be

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9968c05385047cb42a4a7a667c38463_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2980 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51bd9d88e19919af2270408ceb2fcefd

    SHA1

    258bf90bb5fa59b83eaef6747a4070a2cfcf571d

    SHA256

    20d1395d665a833ea618144c56c10e2ac0c9bbf3810482cf2414ff522c95ce26

    SHA512

    6b642832b8d3b04ef25a16055042bedc504a2d413582b1ab0c1793d2ae9186efc322a970fdd814cca4c0ecdbc1d8b5ddc46921fe302bd9a374258c3b902563ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8503e60dc5c0416e2ceb28cba98ee298

    SHA1

    c35990011b243d9d06078a161bb0143231bd84c8

    SHA256

    444358bd7d1927a6022e07da563956ead8b31a879f8f68c6c527bf17fe4aea88

    SHA512

    e88ebf156860dc5afd05270a1907fa7e08cfc9e73b5d5523124dec575a64e7ecd5ca5d8bf9922d2ea4ea6d06c8ce05230488a99f1712aea42f69de7057a66c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a78773aebbc43c111074ca5293e20c7

    SHA1

    7993b2b9d95b614a696c9690afac335eb512d1fd

    SHA256

    ea895e5540ec4b6c9964a0e4795675811d71a0125a44958c4d7fc4cddbca0091

    SHA512

    e18075f1898fad0d613fa0bfe607c2aed63eeae593980af5cc46fb017f2e9d40aa9f0ee8f39fca31675be36e50a39124d616b7371558c08ab38daa46c78685f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd50dfc3c4bcb4dc8162965f06add34a

    SHA1

    4344adaf57c2ee34de9f9bbc96bbf5cc4658276d

    SHA256

    65f35ce625472d4d866cf259bbaa0414b0e53d523a7096f2719101883265d3ce

    SHA512

    3c4264a0cb4017e3f7147b9a63032f5859edc4079f4e85df889526b7d279dc6dceea484f951c9d075e6a4df8e763077ffd1ff9ccb272a97b0a7abbc15f14e45e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70c0a6850e51704b84e42be137268125

    SHA1

    b500bdfb3b5b13580eea795795b19caba169a03e

    SHA256

    f193dc996f76bd4f8730ff6704e118ef795cd77404f658b033c0095d6eb135ef

    SHA512

    6a3f4922ff147fa630565816cb874e639f32efde050ccac6c1ae4b99630137328bcfc7badfb3d5336a8de3e9417d000883614cd9b5d279f9ce4626df6c530b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b71bceda4cac7fe34345a08610020de

    SHA1

    47c3bb8e0128bdcfb4be9e4387bc869dd9d349de

    SHA256

    a5e1d5c829960a5bdc06fdb96f594a6925ed7c1c0b74606e002591da4845980d

    SHA512

    a4a966052f7efacb141f27a3151ebdeed1d801bb9ebe6170fbcf93d5975e49a940b0354a63c4f93963f1629d986f3a37f5f5e6e0818dd41d2e6d783cdb2cd40b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e98e7e7d56b7ae88b1ccfc9343ad515

    SHA1

    dc1ff02b3844e8ec163a212a3c3edfaaf1d49a50

    SHA256

    30558851de23dfb152a2a58c57dd72dcd244ad086d8c85eb90fee92fd5aef45f

    SHA512

    21f4ba3ac453c42fc747a0d46d751ca0426f951e09a8e2cbf6331720e0208761d07a0587b6ab19240c7f0023b7b650f85bb08e7580a4cf40fe5ca1ce14473227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfdad1ddfb010b741b20189adcc3b2e8

    SHA1

    2770c1dcbb352f41c4d23f079bb31a47c1ad0f99

    SHA256

    b52c8f133e436ac4ec33156c5b7676ed18801200f358d0d551994802b150ed68

    SHA512

    8f12e406f65b1e67398d8118afc8827bba881896f8a370d7389406fa8d820b5a4ba86bf7e77203e7be717b4cd8b67704a9d66f980e582423feb2a18a5e11ef4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e12b84d53baa8ef3d6f73efca695c46

    SHA1

    651f73c6fe0100d5afe1a5c5601427b5f6c17b5d

    SHA256

    265d741a45254e1ab672b150fcb0979dbf0587b4ad030af30bd9b76c89b17dd1

    SHA512

    fe5c491f0a74ad3601260c96df9ac40f33d883f8a09a09b3160f5b4e22fdeaef4fda9fbb2906212cd8682b370af7003577f04115e82a2e863ae29f35793d72fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6bd3d02e54226287a858b22991dacf0

    SHA1

    85605f23685223f0f0379431b8c12ff876e2500c

    SHA256

    7d3a2329bce240afd029ddaa138f99b0bf2bff125010a27a93251ff97d0d0176

    SHA512

    4afdd15d9b0007246d1bd8e2d1a90d429e70c3480b15ad5cbe425b84cb3a1c611ac84d43f225bbcef2e60415fd616f0236935be4751e4d8340fec181fbd97b28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    584b3bebe00b3e3301e259cc63bcab80

    SHA1

    110a307168bcbf58995dafb784a570eedd6306a7

    SHA256

    3b1fa5af31d14aedd5b144dc5aeab9cfd70062ff3ae14265f3fcbdb3c78f7a77

    SHA512

    41d803bf1ae64a616e5ad20b7fcb2154e36a98b86e7cd38daac5535209aec66b9108f372eb8a4fb33c561f70c4c88682c5bb2e4b38abfa28faccb2b751f4afbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a50e922cf6eebd2a5b654abc57833eae

    SHA1

    05c98cb1a563df7a556b7fb158064845336228a8

    SHA256

    ad2c4bf0342ad569c48d48158188af074498b534dbcfc698f9a3b0504c497a99

    SHA512

    9260240b1569468e1005ca144457455eb637c036200d83c1a8e43d33f045bebaa94849534e7f7e064c3d315767f69f090980b339958ae18025cd484e238b1d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea7e1c93ace62306f142182001c27c49

    SHA1

    4f062e4baf5e488de6664ba57feb2e7bb8fdbbcf

    SHA256

    3a8d500104d41988adf8ae3d80bb6dfada1dd3c3d780df540c35e593b6726286

    SHA512

    b9058734706e89336744ac343ccad6486897cc19881189d4c90e23d0510413a3e6e41e11c60da045080d54862fd2ec77c599ac4e21e801f53e46b1034680e774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96ee7e6636e3fbff2cc2f351e3a17b87

    SHA1

    a335826ab01b6e1b0d2dd6691e22d4e925198c40

    SHA256

    e5456dee354917966c01b46a2aabb0614727610c3cd5a1dbfb0fde120a74fcba

    SHA512

    523f3c8c53e2a439dd68caf356400b1ddb9b79500240ee03a0104cc412a0d50c07f31073317fc33150add375f3733388394a5488eb1dc9e40f45b2747316e986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f1eb2024a29db5da19eaa693544f4b3

    SHA1

    c1b476a544ac28d6bada7ed948fc5ce03b1fe1f6

    SHA256

    7f7d6c88edc72cf0b5f753d675f027865c4c3c915a2861da9b6095b6d807b5a4

    SHA512

    c5dbcbefc4d3adc72a8448ed4d8aff1f561adc01860f703954cb02a556953301f82199b858b135dcaaf1e5caa7be0bc1a4a2b80255532b77c93577e3da353feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab0018fd5781a7285ad32ae8a27199d

    SHA1

    b34a80efb44a6b983ebdfdbfb7250bafedcb6754

    SHA256

    a73c09b8ff9deda8fc71de5a04948577a3a487e48489bd057d2d287491d14bd0

    SHA512

    45e34d48ad646bed2b860a3c3c26f01f9f0ecaaaeddc76d5c621ad57f220f5b26dd742ff771bccda3f3fc4c1500beb1cc3234781939dbce032586cc74d212374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c147706a3b80f7661a754b7bcc90bab

    SHA1

    8c987cf81d443e47dabb6117519f066f50e59bbe

    SHA256

    52eb75287f7878465a0378985754f46bd3fecbcb9f39b603343477bba7987616

    SHA512

    d682f15ccedd70aeb18c6bcb6d8e53bef604a07333924f9b1a9adb2d1ac3f1182835df58e18291644f4d7b2855ab4f747ce905bde4a20cbd83f362623c06533c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92296c49f103357ef493ee2448c3c736

    SHA1

    be79614895a1b8c85ddf610febf5c03812c7a262

    SHA256

    a4713048ce8716f51586f18a3797a313fe60fb5f4c9a886da1611e33aa90eb54

    SHA512

    40cac9dd648ed7e498d521a77f638f7d2e2ff22a38283798013d5bfe77859daa94033ea7ad86e79fb310e66d5245264341bcc34ddd9469b4e4f3952fa473d3c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a7e7bf8165d53ee48ce776cf08ef28e

    SHA1

    c14534c1d98acc8906df6b7f5145260ae7d9bc98

    SHA256

    0b4d5b33a307fbcee35e8428a141f6e2222d157986bcea47da3898f6918e876e

    SHA512

    4937e62e023c3fff07382a901f3737c62a395badadefb2650797d54a3688c45a2328f557f856e56be49bc9d92aba4b93c3853f0728b68dbefbdf81501c0e513d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f140e374b2e5d20ae14463acf0ab6558

    SHA1

    04dde5655bc788dc063a0ea60cc8f7e653bf50d7

    SHA256

    487ded308fef7deec18ba315b44114c16273f6ffc76ef4d7866f972f09f34c40

    SHA512

    8ab96d6d1e5a881003d1a9e6ede798a2a0d06fab04de2625c56e0f1115e2ded38768e9ee558fc5a918ece43ceaad3187d2ca96954dcc18e2840071b91d447e6d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\bl977i7\imagestore.dat

    Filesize

    5KB

    MD5

    34390611ac1cc53aa16574101655d6f4

    SHA1

    2a83d128fa75146922202bc2ed7191a7f2f11439

    SHA256

    1689906c9780cc9893c189fb1fbae8d8205726612912f2a72380cfca71fbb92d

    SHA512

    bce88c84f3e4e3a83c011d873de3c69e7b7760b42821f33a4a2116ade8663603978a0703cc9bdf920835076c9696f41814cbf2b7f682335497a8cdf27e68d79e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\favicon[1].ico

    Filesize

    5KB

    MD5

    f3418a443e7d841097c714d69ec4bcb8

    SHA1

    49263695f6b0cdd72f45cf1b775e660fdc36c606

    SHA256

    6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

    SHA512

    82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

  • C:\Users\Admin\AppData\Local\Temp\CabE17.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE78.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b