Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 01:19

General

  • Target

    03df47718390750b19c0198c85845419_JaffaCakes118.html

  • Size

    44KB

  • MD5

    03df47718390750b19c0198c85845419

  • SHA1

    e92d342fb7ad3a59d84442d2a4e808313ba64856

  • SHA256

    b331deb6ba853648c8cd44b9867897b0c3a536d96a2080c142b3c4833f9b00dd

  • SHA512

    70ad2a19fc350ae2417a4c9f25a209b39a2ac68ec2d068c51e3d302d06d8d7d1eb11685ec3807a41cb756279425b43b4a63542ceaf2c07c28040108c96daa45a

  • SSDEEP

    768:NEnHvvCIhhogGHLFtTrFUljTWlJ2Sx7fO:NGHvFhqRLFtXil/Wl0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\03df47718390750b19c0198c85845419_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1416 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3abaf9fec41117deb4f3ca4669f7ee79

    SHA1

    237d1f3b752d5a06af1519d2e66087026f37b987

    SHA256

    cdd4eaeced20b8ca77fd1bb1949618e29aaca7528f7ad94cf3a9c6e02650d1d2

    SHA512

    09a7cc1543f408b18f96443757c0fc718cc8079d0e2991545d126c37d26d5d0e153e93a944abe28949fe3b82c1222dbe149274d96b7d6a2a803151b732f92c87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3c0c708d350eb68688452946bbd16e6

    SHA1

    9f9729bea2fab1f5787bd906459c2aa8693cc05a

    SHA256

    970655541e2243a25961a0f000aa9b14e8079493fc9bcbbe9ca84fc123c12b12

    SHA512

    94bed3b2c5d867f6e94659c4680d9f58efb2657d2e09819ffdf7cf2badf701991fe12424fb09b85c5b79e55c0e96072644651a014c22dea941ea70217227b27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e07a21ce0e0fcb856fe5e385d7423b1

    SHA1

    8be189c4627af71f3bfab90695ef232d175c1791

    SHA256

    123a3a367da7132bd0524ba818be52d1726bc055daec9a8fa5eb9c347ec041a6

    SHA512

    23d50436d775dee38e5c392a1759efa9309b215106c52472180bc791e2db0442874d14f955b3fe5bd4e13174d9bf2e341de0bb204895672f354a672c68553bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6e3a848d52b1276abd6838538b0f9c

    SHA1

    5c3bc269242e13db15b4e517204a946a123788b5

    SHA256

    f3d85451a6804a3ef1830b7b985d89bfe12ffc4be3db5b600e2b09460e30e54f

    SHA512

    abaf2174f5767adf6e06e93368d82f64f028c23b8fb0ffd16888d2064658c325664d453b49792c4a099e48fa40b7cac926fb98e7fe4a5d02bc0b258d1760b7af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6e18252271cde7693d90df9ebdc1a6b

    SHA1

    dbd2551907251e58718ddf12a62723953c1f6aa6

    SHA256

    77f8f48fb5bf2324d044d62c3b3d3830f59e50d8a5ae0332b5b1efa20478c063

    SHA512

    4db1596395d640be771a27e7a819628f709efe3b816a5da8319a74da6756fe1f03499a2c6c4f5087fb0639af3a61b755a7282f57b7c73581978341dbba03e99a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4a1d8c700a709d7decd9afccacb0c19

    SHA1

    75083d901e59c1c8951e6470315b159ec577a664

    SHA256

    50cb3aa77b70c2badcabfdcef920dcb5240c9e70d0c7b41b6e8575775b93e9b8

    SHA512

    9b7132f50588429599f585a2fd63bfd40d968d815e85e23dd319a991ad1cf093d00b438cfaf282873a80243731d7bbb109fe4ef23ba77ae5a0d5655546c66597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd8d2d95aaa17ecc0c06d7f4675220ec

    SHA1

    2a9689d83d99428e1611aebc6763f1c4afd3fe35

    SHA256

    b0d4f2cc39659f6262d0034c0ebe583efd0bbd0a566a1e599dc7a519c9479b94

    SHA512

    84ab643f9f70500d748603ad30b99e63eb14bbd7b11a516dc1986c262a2e5f57ad52e592f9cc9da396cd1a95b3e3385bc180bdfd3d568649f52128bdaa432b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a1c74bb1cf32f53435be4845c3d4507

    SHA1

    6d7e382797a98552446fe4e27de3a7dc93914b4d

    SHA256

    d8ca49e536d4e20f41c527ef5f6ca5f6fe97876776a8140715060cee43fb4267

    SHA512

    343221ec612aa0447d89db1a92b6876dcbcc22c3ce06346710fdeb57d8d33d45533759e9079c1ef2bce576e0c80d8a99e452fa0b91fb5dcfd719d09fafc97f3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecba775daa328b950ff109f10e39c26f

    SHA1

    67c17ab58d3ced9f913dbf1607ee2a7246a2054b

    SHA256

    19bc2f9f3cc64d02bc3e1fbc5872f06e5a3e4946f98cf936b4a63d251f1988c7

    SHA512

    458f7002897a276a67f76e30d130343a517b50ce460beac6ba3480f2be0bf528640bb25dc53183b8303b2f2acc20e28572359616438c3edbf55ac9ec5ba1b4a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3233515f6387e855ac25f8ab4837b2d

    SHA1

    71aa8cba728786bba0962e86e1c822f09416fea9

    SHA256

    7d906e3cf1c9e228ba9aca0abb5fb3015403c4dd8ae5f74479b30cd4b045c3a3

    SHA512

    3f68a21a779f0c042a76200ada5b8ca2f743aeae4d6197f09f20dda8d56e403d1354bd6cebbd8d554f1ebaca62ab417c12f113905ee9701515792f9c368d7acb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af6855c991605b7e9788b3bfed1ff583

    SHA1

    3e3270fb46e4390832d174b54ea6943cd518a70a

    SHA256

    afe0debd59d5475f7e5d92cdbf44eab85976c22f65433110e43cf3aad8d8dc61

    SHA512

    754ace8cdc9eec6833ddbab0f7cdc1cb9a69bf33f73db8da3593c169ae873ed102aae22d8c43fb15022cb8325b7230184228b24fbad945ec44a24d02f0ba33d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81bf547996766561fbbc2b22818c3f53

    SHA1

    cac66fe460d2d287cbace93b01cd3d3a78273d94

    SHA256

    c31b6423a572d709d8f1aa622b933f7af73ec94788ba5aa1a5f9153f71e30d66

    SHA512

    3cf493f431ed2b3c705be2b932c0060376a92f90df0de83636a8278523dd182a901a8adbde2be0d485bf5d18d295ef08a0ce7306ea3db4fda7479bf9dfa1f964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ea75a5546604075afd0cee6dfb50ff2

    SHA1

    4f70fd42a85520b0721072db1009968f9193df71

    SHA256

    05494cc5a228b3b21394a5fb805ad6cdab1b96837d3175e9fb7338b263fcc81d

    SHA512

    508de8976a62945c15613b6812400000eafee1dd88bc98ea4ea207c5ff557fc12ef0d7f4798e552954a6f9e78ee0ebe3e350062cb659fe46a58f1c3edea81bd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cd7756c7ed120e09335468ad8636f14

    SHA1

    190cf4cd73886e7f5028137e934a810b1e2874d2

    SHA256

    18b46e75004b7e240b9d666a5770d83335a3222bf593ed0a1d41ebc5e4e98335

    SHA512

    001bddf6f90510461ca0a3e89d01bf2cfc6046b4d57041c76676916b97be71fb283939e1bb82d44fb0d9d0a4375b80856d7af7a76a8d30cf325fb2303908a593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b4bd2a4e3b914d8450c7413c8638806

    SHA1

    46ba1be9649ba7442ca77e1518449bf046596057

    SHA256

    9a4fa3bad4ec62cbe59033017fee495ad6c16149c34946078af2ee01467445a6

    SHA512

    023127d2dbfa239648d3d6ca5274d15a16002e661a3b9fb5e13693061ecf1f9c3857c85d63563bbf0247665ad22c5e6ce2faf7103b70c9e2b5a43cfcd0a7118f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f247ae40e213e34b7ecbf6212541b04e

    SHA1

    de7b344d6d51585c01c1297b8d24911381e96d5e

    SHA256

    8ebb2c51cf4c77679b190ee13b678edcb88c70141eecf3d307f51a975531eda1

    SHA512

    6d5688beb96bd9d181976f3c3cecd39a74d0ba0c3b040c3261ce5307df085457ac7acb7c82c77855c7cd643a686eb06517c801c991b697eef5e7de8ab014cb8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    628c1b89963b9f53b899d617ed27f5f1

    SHA1

    41049463d84ce5d538f83453dea2108fa9c61ee3

    SHA256

    4a17ef14d5a4cc0e0a7ec84661b7fd62eed0e2392c3ccbb30747d6c6659ab4dc

    SHA512

    8dec5a9d9b70f8542f813201fc9de550c2e0e486486bb4f305ff740a1a95fd8b7dc07cd97fa822877d6388a57a76b6597995623d6793f8b582099b1079a32eb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d5858fd374e680df422a3c37eeacda5

    SHA1

    2a70ea1b40ac420e34cd18ed9b4df3e67d1aebf7

    SHA256

    ad39c215e7e349bf7cb902e0f3db48d187b9741ff06c6899ae4823395061f954

    SHA512

    38d7d1ac8989af5ebe5fa508364715ce93e5d2e2dd86237c44f23ecc95340191048d3d1219682b31af269db4afab7b4821af1bac8fd775b47de140c7339e58bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a1c46ba6eb6de017cec389a7679eb5b

    SHA1

    4022f5facba0741ce2f8e2ba4aa21b091e83f835

    SHA256

    888b8f5ad78c6d0479e1710471adc8d1f7d60ac37f9fd0404c885a1c3066dd49

    SHA512

    aa133d04da81fc459a02d37aa91a909936bab0042866d521fbf7b77f4ff464cad534f418a33ce9ad2b63403af606d4ad0c979fe5d97ca1db3daa01d1444c722e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    539d25092f1ffafe1284e5091aa82a8b

    SHA1

    562c7f293e68ea682d489625573941c682bcc8c3

    SHA256

    a520b797b4f2838e5e0ddc851dea9ee3bfeb55704794a09e8dd667abbd77d0c9

    SHA512

    5cff85f3acd3c983ca2c5d36f8dfbde164b849e056e3cab5c35f1eb03b9c523dbbfc94ccb549dc391b4e66f580f4e1f8fc63d6759ae282ae496e50afa3063b62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c1a96ef4eec8ef0ff5d75e5f0fd9f2b

    SHA1

    1722bb01dcd1978824b008a60cd7fe5924b85af3

    SHA256

    d5c911475e8e1675aa9b08a0f66dbe1866280fd7072cedc71d1d16816c384a6c

    SHA512

    691270f4de9572b188d527a13e946523b97e42aac8278ab217b2c1bfc5581100cb51c3de0e24a9df43940a29e202969ffd1c69af4917171016d1d43373e2168d

  • C:\Users\Admin\AppData\Local\Temp\CabF73B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF73E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b