Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 19:52

General

  • Target

    facfeb549fc280c8c9d631713705600e_JaffaCakes118.html

  • Size

    110KB

  • MD5

    facfeb549fc280c8c9d631713705600e

  • SHA1

    11aff023fefe5947902a22aa095de4eb24fb1a70

  • SHA256

    72765d1930c80c53e9af68b0c76aaf461a395dce12f2d706f53150ab604a62c8

  • SHA512

    7814951dc1d39fd5925d0e0124fdbeb8d9e0d215a534c92d6c3ecf6c33d22e5cb22337f3e28436454c8122ef1ca34abc68836664338acc1183ed06a6fd26137f

  • SSDEEP

    768:S497dQHovsAFBAXKfQW0zTrw00GRTSyXaO2/DeVCclIG2uErCWW9ENhrX:S4t/BAXTG/Idn2uErYODX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\facfeb549fc280c8c9d631713705600e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    962956788090c3ca1f5dc00d01235643

    SHA1

    cae478dc296cb0ea558ec35863efd18b7847253b

    SHA256

    bfeaf4128c0160939fc567939cff506bf8d76d9b2c4af61c3aa2fdbcd6350591

    SHA512

    0255f80f9e04a833c1c8fbbdd401985b3227cfdc4440e0939ae82f6d843ebcf63e5820bdc68a71a8a5937d6303237421876904a5b53c3bb2f84b3ca3facf20df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ce7cb72863453451a27ea3183ebbd53

    SHA1

    2a8b1cb7b752e8ecef4ed280fda6ffe45f57dd91

    SHA256

    32c28179be2a193ee56c0fab099c4980c51c4f9cc1ec441b8f7bd61c7763bd3f

    SHA512

    7e2a99480269adda223da3fc11a150bff6f56d73993eb9b9f533e0f124216072d7ee807aa5e52dad9727b2af91192322d646957f2821386c2d005141e14efeae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db75220a01c9a9dc6961def37325bc6c

    SHA1

    dcb2c44f5595da555eee3f9ddf41840ee1f79583

    SHA256

    524345fd2bcd0d8ff65a19fbde51a8d8c7dc2218d1173895c1dddfb57a2672e0

    SHA512

    f5f041da696934c15736349432e2286ec4e9d31073fd66caddf5875eb2b0007cdbe7f23941c644541d67ee06c7ee3ff56567ce245abb3369176b8000d1b0d6a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21bb18629fd8d0eae34a6d37a2ac417d

    SHA1

    3747a3c8084fb64acc2150014ecc95942f687a0a

    SHA256

    e30ec27a690cd6a2b09c3ca231314ba3867b1de6d888012f0c04707ddb38f036

    SHA512

    0a4b00fd0d48074c6abd9c224b53863132d471df27bf87c021aa5266686afe33ca316517d3fb8af38f8086750ff25843a18f02eb920872f00763ba305164d7cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c42a029b822a08864d68f500b5ae4c5

    SHA1

    769d75b882392eeabf8c2f4c8355feaca43f9fa2

    SHA256

    aa0771868fb2162deda1c1951688b78728f119c3204a27720bbc2b199dd14a55

    SHA512

    e2244a922a81dd2279655afc7aa90fd6c15537f51b61469430fcf7a7f52da9b9a037995c75299d30692f04388640eef40c09a835f7cff0747ad9bf31d0aa8cb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a4b196e33021810393dbd5afb89c2a8

    SHA1

    16f98aa9827c35eecff4f3d05eb371d8c364b0a8

    SHA256

    b240c4ce2480405a7583826566869210884fa50a883174881b57b74336b16673

    SHA512

    7f3c7c851de4fba7da09ae70f2e4e398b79751eb11220cbe862b6cba3bfe8f18104d22fb2fb40b3f938f338b66f61a246dbe5d50dd96448e8388a0fa911ca524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4a26ac822ec0c7ffee08810e88b9847

    SHA1

    8d6238f44c2db66c134b0e40fa9ef46efda21990

    SHA256

    b6fa4b9c9f8099846bedc68a673a3d1a7081c1c5917e0f2336716c181fe03cd8

    SHA512

    613db1d44cb4b4a66b123775859746ed4610f0cd5a492be6afbd7d1ced36de0049b9f2d0358154c75603859c4ebdd1f881b4833d48837fbd55d0d8d3488843f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a063aec2a1b13ad206421cb0a469b388

    SHA1

    953fccc6e1160cdf2e5c46398c6440fe931b8737

    SHA256

    c3cfdb06f0e5205c6a5c8d348a0af9df52b5f5eab7785935fb9cb4ef73c9a93f

    SHA512

    0f5ef5258f118c4a3795c8a2f86d7493c8790e16d43d6c6110b4e42091ab7d95764e5bbf39338690f1973ff90e7b37f33da74a1a426e2a9865b6cab5995450bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    457b349fb04fc7e6a48bbcc1caae0eda

    SHA1

    b46f5ebd82d4c348cb333c7735d59bc5615f7702

    SHA256

    fb691371a85b806575ffe697138cbfc4ac770c4e562ae364c19c1c64f01c3fe2

    SHA512

    9e166306104ddd513178d359e87a4fcb8cac652a9c291acd530611d71d71289b8e785c9732b864dc101a1593a0468b6bf509144e94d58f75c154712a07e59075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eb22b8aa446154ce7ac22d771eb6177

    SHA1

    9a59dceeccb391111b1b98710621672e8ed18139

    SHA256

    5b714ec51ce88087fa525f84832818dc416fe9bf3adcfdbe684e174906f6454c

    SHA512

    191bdda91490fc7a5fab16237eed65ac80cd70cd8347c44f7790bf73fc942ccaf384662669437906a48d3287a380932236d59370bad168ce98b0d8caaab1d4be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d3681038913ba9bd6c6347daa950604

    SHA1

    c3bfe37b55d7d844d9f6f88cadf5cc31e9560daa

    SHA256

    3f8ab89dfbf34a5e0ee1f84ec9ab17a18ef50f9010bc065bf583b2687c22aab4

    SHA512

    0cc0793e2e9a8280a36c8b98f6faf9d65cf5f9537678665fff17b9c953817ddfff637accc7f7a8b79650e9c5bdf5cd11f87134d699dc6230a2e30e3c59443f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e693472dbd7a8c5bbb7deb28487a837a

    SHA1

    a83d5b0a40f604b62e5fd1c52cc506391f238995

    SHA256

    9adb7d378d69b690577f2e204dc25ba5038f3bd4b10ca3f208893063a9ab2139

    SHA512

    ee2cdb625e2bf30c955717a09142c65d09976d9e78d7e16e3ccad920002e8ed4445ce31ebd4a8a3955f3d352e7f743d4087ec829be6f63cf05d58666f650a473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5605d3c9b71239591255883e1bdb18f7

    SHA1

    1f0fe767af4a9d999a9ad2c0f63bc4ad6604c28c

    SHA256

    26f0cfca9b4fea02285cf71e87977a166d73c961f64167343821777da75254e1

    SHA512

    7dde8afd3419dab9f15c8683a887c8b9d81b8bcabd64191e78112ebf74384b972ea4c831c577a31cdd194453a649b9d48b54ddb427ea6e831367f7b2a85a57a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d11b9f46e77b05dbb48b1368c7ec632

    SHA1

    4f5ae7df70a36405c7d267dd60a378c6d21637b4

    SHA256

    577a72f4e00e28782af42c6d1477593e64ce4acf72dff38f68d0339228f7c04e

    SHA512

    9ed0f92d8f6a3058b27f7a131cebd61b7a8a250ab0321ae21eeb777adf406ba5e368b82b992cdbfe7ff8483b18612e84b5afcf1ee0cfc0716c75455c131b1d59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a617c6f6722a1dc34fb67636c8820427

    SHA1

    b3d1b45a8bb8829d9d0f592d4ce89b1d585e4f34

    SHA256

    90d2732119b90272749c01a390056dfe13a59c2f23f7d152dab4ee36988edd75

    SHA512

    41f90bea248266c7e8e7c7f6d84ccf7fd7ee7498eca274ef277c7df1e0e259cc49461a40eb4937d1ffab594101a6e5a929c50dc3fc62dbaa95894a019744afff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c4bced58a340f77a19a854194f6180a

    SHA1

    a7cfdb294116d25b90a637b15e1a88b1dc8ddd1c

    SHA256

    d0a4a6d6cf7a71376b3de55dab163853504cc7b5bf1b3b8ce6d1ecd160d82ee1

    SHA512

    7906e6cb212130581f5cac43b1f34c3b42dd2df4bdd81ccc14899f8776768cfff1a083285620c8675700a03893f6811c2c3c5407745aa4a013bd44762ace12a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc575f767948fe36bae8c344fbd00e0

    SHA1

    57909443cca4e8552ee7946dbaeb725e18ecef5e

    SHA256

    87fd4ebf9fa17a8a4607ce24cd90103936878d8b21dfbd46dc159fd762238e6d

    SHA512

    7aedc15753e293929b202d21114a76d224db1f30183cd87853f44e9f2bba9457689242b590f6aa37be743459d5c55d0b77fcfa94b11c61af62856c2eacc55bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d6726cd6547957c0001f5e0478aeddd

    SHA1

    6dbfc6b551c8c4df232d7a6f4b137ef3d24059ee

    SHA256

    9e915bff1a0ca5b4f23543752f944c091972eb7cba8cc6aa9c15a38e145adc68

    SHA512

    13dc4bfaae078bfec71be141a8310e4410c605a54cc4666206580edf91f06ecf90f4d96739c0cbacc5db59859d1f42b05d482b63929a1e08b69dccfa6266517c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a26b96df7502ea3eb2967dd40c1f059

    SHA1

    3b576765c15d5cb65296dd141abdf9352e64a1e0

    SHA256

    6d1624c387e1c5b6fe2312e4e37ede91b58b1c2ef5c30b56726140c34addffb5

    SHA512

    6d5efce077a80a2de87fe4d489268c9aa1bad96942b998ed47458f46512bb4c9677a682abaa6d00db57cd079d29a4d8a65ad745d9afc9f3fa8b167de35046d07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60916e3f04b5dc45b82048fa408f570b

    SHA1

    e9d2fa09b79c62a153db70923b77de459c94aab1

    SHA256

    9e3a3036b43ecacc65142a23f881e8c58bb7e245ecc4d7d8584a690b38f8d40e

    SHA512

    566fdbba29c129db5c943aa05400757caf34568289db095b6580b3f5874317b31bac27fad0f4ec609e04561f2f3091db7a245922490ff599640107512b36a9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79ee4429330e66885111e6c8751f6173

    SHA1

    e7b65ed44edfbb559c528b5613733bf9d67431f1

    SHA256

    428801d2ec3cb5311e3929dc707257d96ea38582ff3d5ecd70d0bf8ea427218a

    SHA512

    e1a77cb74eee70af78877e5f281677d5d1311e9dd40e52a4911510b3a5e16eb1dadc73b498bfd237bd8b1d0dc7f6828fcee3205dc544c61b693fdaf4a8f769e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b276be12bf24e2b736d2ba54cf7b4f2

    SHA1

    8b0590407c83aed514d0ec0f9d5a15df9525eb08

    SHA256

    c1736e9b7387b214d2d1b4ec6296c76b15ce8a2ce7ad37c1a653f063a19bc8de

    SHA512

    b7603eee91395b5a0c0719ebf2a960228b0536ab271cee7781336194e9f8fa98df1663b55ab3d17d31921cad0644d9d52682491fcecb393a89381d4f6f5eb576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9a7b70ea898f425861a70291ac3f54f

    SHA1

    8193fff77404bf0c64d5ed855bf909b374c518ab

    SHA256

    fb876e338b2db6aefe984c7c23efac755f9c56591134030c5c49bb41ab31c640

    SHA512

    87beebe30a72fce2112136376e8d5ad4ff90a7bb0a6449a8f3e0db255387a49c0bbd40a732294d19282e95c3edd9a4240f635d6030153c45b86ccb174fdf8867

  • C:\Users\Admin\AppData\Local\Temp\Cab39A9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3A58.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b