Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 04:33

General

  • Target

    fff9070e4eadcddee84493e1e2fae349_JaffaCakes118.html

  • Size

    345KB

  • MD5

    fff9070e4eadcddee84493e1e2fae349

  • SHA1

    c46e1f4e586d86d71d89ab8fd0599f8bd2642e20

  • SHA256

    c4d8d0e5a0dc9e371c0d0be8c52eeb6a1ab17633b2b9ab8f9311c3dd33d2bf4f

  • SHA512

    dcee27f95eb56cf3c5470a23ae9d70c37ece9ad83af3191860074578a007377854b661059aed5e3c676653a652006c4ab7baf1c02c20a7f1daef9fc08aed2b9e

  • SSDEEP

    6144:SnsMYod+X3oI+YqsMYod+X3oI+YLsMYod+X3oI+YQ:85d+X3m5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fff9070e4eadcddee84493e1e2fae349_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85aeecc6a5a730d33e885175994aae69

    SHA1

    4b02b126d05ec73de291804719ba9019bd5d2738

    SHA256

    f85e8ffcfb1eeb852726421543bb1417112e9c3be94d6f6edacd58e66a4478ec

    SHA512

    418a81a634f9ea24da67512107f8d02c877133c91e24e9e76cff43081eb27a6753827fc1c2cac6f2c6413c82edf4a1241e596883e07506edab0a0be4ef2a4e3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    950c6ef4d48781b7e79ef2d11c444fef

    SHA1

    6a10c1b4fce3038348b7e6e41419c206b98eece1

    SHA256

    6e821b26bdecb79321ec4ea77ceec9809c45c46ba821c4fc8ba322549e591a7e

    SHA512

    bf054a269f09e5dc183d7cd58eeda233c9b274309518461c6e2e9ff8130550306cb0f64f0592dbd444bf17a21eb6d67f1c5add09b40355a96326aacee4741040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6161ef9f22974055a160e6b737daa395

    SHA1

    c9f4dcfffa7dc18f91a12f16d99c930c70a3c39e

    SHA256

    e279b7e903aee5b3d6d48c2fb3e62f75997c751e76ba8987fa3c3b67e44ba9fe

    SHA512

    f15c3e39746c2352b3cce85f9171f77c6fc9d3c564f8e2a8729077a0937c7a0f4f79e62db0276b44cf3ad94758ae0f45c125289858187f63a11d2b0d06a10970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63074432d55dda695309963333d365c

    SHA1

    6d81d629d8c6fd4b4ecf9c490995ee10e0efc05d

    SHA256

    edb6d7484d5d8a8565213e1dbfaa0cbad265ac50df939d2a64806a4ce2af72fd

    SHA512

    02c7b9096816b820e780e7769565f56f40d0a9551303af475e6209f13f933cbe4bf2304387bf9eb9d89f79aaab3629d99401d1221105cdaa1fe4aab2aec75627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eabd3775259614dbad17716868f24df9

    SHA1

    e9b452b7eb34a38417a0e999443e5672f0bbca06

    SHA256

    605e20e4c74c2b41c835359f3410c2da70492178d6bce1f97e5ebd2ee3fc6733

    SHA512

    283544ed3791714f7391e417b87ebb71fe8210b563e03a7fc8fc0a2eccacd35b2a6abe19fd650d24240ee78e7e9e37e5b64134ee258fa0c73a8bb57644ccbba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d41824453d63da0aef3c429ab8b4aa1

    SHA1

    a9787db9319604c917d59c9d6c3e5e43f9d1168a

    SHA256

    e5f0206d34659f5933cd73683e6a13dd8e7520370564e3aaf9bb6b8a334dfc2f

    SHA512

    db7e1232f8ba60007d739f46f750acbe20b8152b9440a3daa302b5f2bb5db17150a9246002055fc412a4865decec4c9cef3c61910efe1c378b5348c516e70a60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b96adfbb7e066e82384d283c92914d90

    SHA1

    9d3c3a331e5fbc0a379dc3df550902c55f655b06

    SHA256

    00d32a87100461884a7c4edd8e119464b5488a13293f49ba135a7d60b8a44346

    SHA512

    91bfab1b6ed006685d4fe54d58126baa3bf6baab59d821574e386fdb7f227787b43467c54875482be4f8c83a6ad70da5108e7a3c627ebfde3aa582c06f0a81d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c77fa0750289463427b1ec08cb50bf72

    SHA1

    5316f383a24e86f28c6108851583230d1c2fc88b

    SHA256

    0845940c8c3845cb88b54107c30a6b229a599401e321ce95b059231af4c2fd49

    SHA512

    4a613879505a28bf774bf12df06200342de1e9b139dd97450cdd06201af1c0542918cf58eb2df4e638346ed66f9ed3a74bab286828a1ede49e20627a7b8554b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e5d25d1dd498b264ec4c4151b5ee27a

    SHA1

    3efcd903ee44233fbe29ab7808942bf2f4ae040b

    SHA256

    700ed5354c0ecefa0dc7afd2a10d48ea8ebfb4a6b30a7352e364b2b0e1077628

    SHA512

    c177afddc03af4b0ce8058fac0684e86e23556aa13e9f3ba7b2f6c989c932d9922a676f6a93cf281fdac9150670efa32c499e07647734ca3e95b2f8b56cab56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11294f15b08113d7fa5fed5fdd087470

    SHA1

    20658d032f06d9fc78634f6e23f5b6e350ca2763

    SHA256

    7c193e512b55fad65abdd7c10f747c00cb200efcccb96a344132edb59f201689

    SHA512

    2c4e902b2f22aeb9b47590c93505f73e00bae17e920b0526cebb40944a8087f1a5cda4082ddf782773db060ada711335a4c5c96fb444b183b1b26cdbe8c134b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c1d83c068d8d28729ef6cf1c9c3d13f

    SHA1

    1cd1acb34e25bb1a7f8e85b8c65d32cb30b0e8db

    SHA256

    48f0751d797ca8c853e2d0a2fcb8bc6e2b4af22f30a1def6ec42e5337439e41b

    SHA512

    a14e6e3054a890c7685f3c9b31183afb53a79202a20103b3d4d2538584ea0c42012e70c08ee34bc128a15c12a3f60455fa09c9ef957cdc0b51493877bf37c003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05cc6515fe3acb7061f86f1205c993d8

    SHA1

    e3286da6d0f53b7dbf86f07ccf8eb2be4b16ad1d

    SHA256

    a886cdb22c16219e9e2915b9167557095e7b9f738562b066e43c2481588c6667

    SHA512

    e4868f29b4d0021354a24eb243011941f7f80a2aa431e68dba788953ee6b9f5e2935d4b17bb137860dc192aab8433bd5e9454e4dddd444fff1300dcff7de2378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    673231b2a37151e8ad0c7df56205a459

    SHA1

    427ef608ec6b89161390d273b06c8ccb73a2fcb3

    SHA256

    144875c06d67226ffc1db8368f1233cd7ad8781228cd523633e7cef329ba2861

    SHA512

    bc2b286cffeff96e6b7eda96fb70e7f75b658a1d23c8b0f03b970245c15b33b1b1997c74cf4160b9bc6144146331037314d3a0d29a21487e839c698e1778a64a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c04f2a81bc64249ab8c4378153359fbf

    SHA1

    c6f17eb22bd13bf8e1a91e4ae7101a1fde769e43

    SHA256

    ef08cfc8f33eb371e00fea7225e8389c273202f832a05cab3dbe6f467b0a715a

    SHA512

    e5fbb10f7ab357c0b514ad678fc39072eb2fdd17ac3a40f42be7b28ba651ec9bd1011ecdaded0e010bd9fd72d015d0ed9afda2f33ba22b5c1eea07de80ec9af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aee6d178b2bebe596a06dfedceb653a8

    SHA1

    daf3472fed0be8821af2f7cfe17a45c2e7dd7f23

    SHA256

    102a87be8d278edee9532c2cb2b55b3e45b6dd4815eabbbcfea0b5d5d4db11a4

    SHA512

    6e67372e4d465600aee1ec461a11a4817f44c1bfbd7e03938a77ad9893b9d91ede537512d6d92701b2ba6d4ab960cb315a9cd903048f8e6d2be6e8983cb82d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d93a77c352ec30baad566c9797b21fd

    SHA1

    6966c7e118d912e7270f26bd684dcfd8b004c39a

    SHA256

    a7394a87fc8d2073ca3531e8d21d83429ea86b123441cb7ab10a83b09cadb51d

    SHA512

    495c3736cc4a521238e0eb7dbcb00e551977a7f111cbded853969f0bf17dd50953efc4f2cd1c026fdfe25cb2770ef7189de46f3cfd1f0fb0dea5de5fc283ce9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3446373163a784425c666fd0bfb7daff

    SHA1

    1ad457ceaf6b1fdbca05767929b29e0bc7ceb9bd

    SHA256

    b40c28296d09d3a6d2b6272904e9e6ffb804a785fce11966d2a70ff3f0403fcb

    SHA512

    ec40b2aa4ce7ae2536cf0bd9209e507aafbba2f8e35796b1edd5b32e020d3f6d3112b34f72b521af467ef66dbeb2a8f0855f004d93eabbe3eb6997c867e19dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a10bcc639569d2f9551c3b4c45ed7b3

    SHA1

    02e3fdfb5c62e702258604727b42c885b48d54cc

    SHA256

    8312849af62394672d7e2c2b05fda18c651ac417882daca33e0c8556771e14f9

    SHA512

    c9c7558e702ba99fff937c33123875b56161a3056d6f11ca40ed0870436c662a0521ac60bac114c8fd7eb5e5f5d618c741db2a5c41159eac8312024a9d550a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db3966c7e37d9e6bfa30bc7f272846e2

    SHA1

    ff2cb6f526951640e40c4d67facf1ad66593b398

    SHA256

    8885e575343dce7cb55ac5560ae072abeea56e9a159a258e179c050751046d2c

    SHA512

    738d0758c448f65a2afc1e113af67d05e3a3d2a60f68a01ff77f182935fb921c8b059e8f551db227fc5bbfacc180f7665de71e18b1e86a797a5dafb4c46e9279

  • C:\Users\Admin\AppData\Local\Temp\CabAC19.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarACC8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b