Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 16:52

General

  • Target

    fcbc2a47be5db76bdafac5e41030c9c1_JaffaCakes118.html

  • Size

    3KB

  • MD5

    fcbc2a47be5db76bdafac5e41030c9c1

  • SHA1

    7fb619b0bb09049f3b8e2a400d3e2e998b7af9ba

  • SHA256

    785ec9c2f35e7d24ff7edeb946e68aef140f38701fd8ec27e59406d929a9f8c0

  • SHA512

    db6976fac4d3cd718dfd9764dd3181c726ba037635d210bc99bdb1b196d714cacb257c2e684109bfc613c813741bf3f2e4d776a86537f9480132a35e169605b0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fcbc2a47be5db76bdafac5e41030c9c1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1292 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b42c6a4aeb31bcc35575c52230b224d

    SHA1

    45ba366134518901a0f978da8ef3a491ea9ae365

    SHA256

    e0bb288afe65ea017860d77c258cf54a6ccddecc586c72994b6cf2d3d2c8533e

    SHA512

    0ce520942ccfb735dce4a89baa1265754e2faf2bdc5e12cb4f0c0c3f8ab592dc5c7842f46fbfd6fd889573e5c04332a23c1593d9ccea1e2346bd2b9a573f591f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92b3ff683fe0bf5dd08fe96f8d5e0249

    SHA1

    a47a642554f959f9545753de2d7cf0e66d565766

    SHA256

    2d820511dce95a9117471cefd22a73e10250c4222f62ac5e0184680ca01469df

    SHA512

    cad894bb2f8657a6983361ffb449fcff0e679aa53c584ef0f7e4d3f70f968b594b02aa2ea9a06cc739327efc8009606e6cf2b28cd843e1a9ba0b9888730564d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1921802dca153bdd071ca94f61c40559

    SHA1

    d56bb99adfc3e4e2ca52a84127a8f230b71d5327

    SHA256

    05a7822c2daba4ded70bb26189155a3cdee2c7b0e888ae72b06bdae7af66d0cd

    SHA512

    9f0029536cd529aa63c10d33417d5bab642c9ca01e1a2f6cbaa9052b4d7d58a45f5dd167a657acc44c7706b9ecda872541e3e392cd929a38567f9200abbb26ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    369423869eee7e56cb29494fdcd8e65f

    SHA1

    ca37f6b46e8397ac259ef2fbe420f69ce24b1bae

    SHA256

    29572880de2ba5429b365aa8d8f094a88dcfb6762218e51314cbe9d42b12222c

    SHA512

    a48970dca1d5ff35e1a16d28284ffce4355a4b238ecdd8b6660b72c89dfa9a9464c3cb734f15cb18ac53490d382782a0ee785a7ba04ae8d0305effddfcdf21c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f32759e2c4f312abf7b232e7cf03e24

    SHA1

    390a95ddea65b7774db487c0e79c5559da7dedf9

    SHA256

    b5434680f09d8f3642e329441c4ef9101a69275bd78c0731f63b020a3a1ae911

    SHA512

    f42d470202c5d8fcb902e597c33da5b62f63b8b48bd4b465f083a51251d937452c45a8109bedff0fcef08651c495b801d427e0f8fc3fd4e7dc6d215f92ae8f65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91fb3d7ebe844df05cc811b98465f375

    SHA1

    04a739a3ea68e7a7be913e5ef679fc683a38f8d6

    SHA256

    bf125034a3bb4356ff5d26e9fa300582366792d11d7a333ccabf4985219cf706

    SHA512

    8b8b9b449154fd6f7ca2fb22566860eb2854034b64dcd87ece8f2b0897bbfac9b4e8520c156d1884bb1205676ffe33da5a84c75bfdfd45e21811f94a4518d7d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d5840c9b2d6b4e765a69d205c6be1ba

    SHA1

    0990f3a3e0e4725b55786161d6667cfd8e63b185

    SHA256

    b3d103b6ba01ff615d5cf49d50a8d1f47107edb811956b2b01fbe1329bc31597

    SHA512

    a439ba61103c654a7138d9102645dd8226c7800491146c3a9cf8f30cf6e366af6851ec17783f61bf5c5ac450997c121f75206b84663ea3cb28d30eba888f05b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f6ae032ba09b44f7669d0020011e1be

    SHA1

    b5fe2937f84094813da900d0ceb2c5af1b0cdb93

    SHA256

    8073f108d41b7fed2926610e8c34e990efedb62543faed95f266745bff51625c

    SHA512

    7fecdc8f29d53fdf497315fe2d75afa4bffdc728bdce90d708f688c8ab7c6a1dd2e6c8955e72c0d3f0e9b0159e43632d782bff29b43c1c7a79626c4044e79490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca7f3bb8c9434679630e3d393602f15e

    SHA1

    998b0abd38a114061a3c4a64208d0bc1c8a0edaa

    SHA256

    f3ac5d835d41ab4830899f9b5d02a14715a510a275e809f21fb3c7ee6a8a2b89

    SHA512

    9803d002b190153ee48eca58f75ee4c99226eff4b924eea78deb2fbf62dc76a039eddfed9f8c5f24dd7b16f13f312cfc2739de46e82fa40dbfca186c65dbe8c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5034c8015cb8693b771c69d60efa6f3

    SHA1

    6a3274adcbd38314347d34ff75539f118cb85487

    SHA256

    e74d0d43943c1c24d4ae377d2ba7b55e74475aadae5ac1f81e18dd27d1276aa2

    SHA512

    05b1efdecdcf1f212128e95484daef319b9ac2a5b3ec67c36904ba277550e1e8d65d88dc564e2e7ba1253c64069016865cd941eb7ff8a3ecc79c0c1254295e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8570bfdabe09b5841cdedf54cc0a286b

    SHA1

    64c78b823f977efc2500ac483bd181060afb91a1

    SHA256

    483463ffce9d780061eb8b41063db3d9a5c7ffe7d23b7286f8bce31ce84f9f8b

    SHA512

    a8c9f6c6c552714034fd4d69c4f81f4ff9dd9989a91141484d95139d98576817a4558afd733bdc8965fd69cb7e581595ddba16dd02ea5783499d2c71c89d791d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2ffaba7acc0de9571b081a1a199a664

    SHA1

    2e608ae029617bbee4c2a79df1bc5aee53d19cf4

    SHA256

    d74092ccd2ce3453d4a3bbfe3410c32f2067a8f11f7242c44089d7f355eea879

    SHA512

    9e7c9faed29ebd21a399c025d8e4e3df5297bd0a7a23aa1c56966ffbb68133572462bfc35f955067adfee19763e79f70a2bed80df4924d6cf44bab9d44fe68e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    423b9f454136f3b6944cc3fd0cc32184

    SHA1

    8b8f43b789a407416284d83be73eded152df2436

    SHA256

    e125c64131f75935a51672377dba30f8bef2cb1ed28ea2cf4fff6536b86ecb22

    SHA512

    12cab80688129d3bc704ba7c7c559985964ae18f31421ef77f36eab360917320d0a95c2f6132012028a8a0243c736b980ffdeb20972a7b3c53b454f22086cf5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3252d2da0357db604fc844526f4abe8

    SHA1

    3cf8a9e10138da7360f3e56df603f0b79d68df4e

    SHA256

    42ada6d9dc50ba13b30f599fe3388ea3067ccec809258396229bfbb7d1f2e265

    SHA512

    40aa55ee86740315c88da5a5b079738a54e26a5712644d81e13c14ca9ab39c135d019db060ace626f61a39180498ebed70db63f5c736dbc6b718c27a63635ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    199793cc9456394b66885bb69c61d2be

    SHA1

    d4f94d8271e80d79b5c61b4971589c2feba03013

    SHA256

    657b2ed6b131f5511a9ed03772972967efade34ef606a0b182484c91cbd493fb

    SHA512

    b163f4839fbf7fa488d4101de94c4bb4196dc96964201ac8f5c19986733bc2fe1c8ebb2a52118a4a214acdb16a6ac650f602ab0a52917555e35fae411a701353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a16b6e436936ba79b21fd4db81af292

    SHA1

    8fa4156e931a44c31431a2bd7e66f7bf7c113bb6

    SHA256

    6862b5404cdd7ace9225385ab22b00e4689f105aedd8158d26a9aa1b615a87c8

    SHA512

    163576d08e711a8d5f8253d59e68fd9884cd55960ac5819f3d928747cac6c05c10f22a53be9a71c5dc707f3f3259554d54e89968b563573dfacffe1137acaf79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c8c7917c869a9dada69d47c027dc81f

    SHA1

    d01345d9778aee776362dad8d8dadd6956d511c4

    SHA256

    b1528f4aff900577facb687cb922b1dd7ea21e2c0516db3011d3b9aedabc4475

    SHA512

    d6e2b0639befd076917487375e3fc1bc91841246d9f87b3e1f758c73668ef0a1275c956014c4954cb78666d1fea9c6ab4620e71740ea96523174a4d66a88fcab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95ec7e6c84084806d5144618e0652b60

    SHA1

    a7ec18df1e4b6772fae27677e3777f838eecfe1c

    SHA256

    8225aca8a1a096861d780a066ba626cc94752ed7fa3ba9124309d5a8d9a45e45

    SHA512

    cfe45866e8f59e4dca707a9ddc2bca171f8a78a639e93012c88918b88c209f1eb6d398f71e8c1514fcee898c0cb267f456e5cdc6cc2f42ce9767d3317cbe8b8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e6a8ef9c584c42746b86588ed773979

    SHA1

    967c649f4dccf75eb7110d51cfbcb5c75fbee7a7

    SHA256

    9080eed7984c6f233b18b4afe0463a2ba61a146489084b9a0823c55b26fe6247

    SHA512

    ddb973c0b185d9b6fc6e8928e85f733b90b363817b11bb9b27884d1a15d7e1c48685eb63303ad925982294e14f4475fd565ab7825bc177fc3afe990b4e8bc29d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7824bce36211c30f29e37241e895a5ab

    SHA1

    aabe5f3db6b62cf8d404912a9eeae3c7d63b212f

    SHA256

    3e00693078cac42181b21d51635db353fd0b964494c250f2e91fabec31971316

    SHA512

    f9fc3a83113796d3d2bc2f74f499e45f9a230bd8c960e4d1c41b2c653bfa375ac672dc83021a3f4431cf7ba6aa8be0d88b571c03c1e5c835c793a97a49f75fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aed5ccd5e5671a0776cf827dd3f6f414

    SHA1

    089462481e0a638f3857e0a092ad350603277bf2

    SHA256

    7ac6863306ca541758d06edaab565c5f55b8201b592d97cf170c0a9c3dc2c549

    SHA512

    d7d143f69ac26230c7a4a7cd1c9b1d4eb81ff1c08497f93bbba4e7d73e04f9e5046b92504574c917d96a2f59e73a41edb360e0fe622f03e60179f5d28eebdab7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d57f1df9b6823cf6fd83bcc99d497bb

    SHA1

    cb5d0a51381a7deef28267a3ca7a562fadc168f9

    SHA256

    f363a1f0af36eefd8fd1e0e1308a02d43e28515461ebdb8e06aba0d6fafccc6e

    SHA512

    62423d00cee7df7406a32548cb7e1883c75de94905adaf4471dbec921d64fe05b710b0220ff14a18568ac365f532527ccca30c4fc2ce26feb583b0c20252e19c

  • C:\Users\Admin\AppData\Local\Temp\CabCCD3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCD82.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b