Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 20:48

General

  • Target

    075e27249109aefea502a532ed5a0981_JaffaCakes118.html

  • Size

    28KB

  • MD5

    075e27249109aefea502a532ed5a0981

  • SHA1

    24f5b021d3bac6b7cb1cff93e6bccf0fcabfda45

  • SHA256

    9b0ec8489c6d39156a2393e3e1aeab5d2cf200a5d5615e567f0e7e24de445979

  • SHA512

    ed8df91aec99453a6c0b7cf5829749e430cc3eb57f1e64dab72a971628969ad65530d50508e1e04701f5847f62a1dc3a197c846f29e5c9a24d0f481a3c18e3d9

  • SSDEEP

    768:Zcd9QZBC7mOdMQDpC5I9nC4IwQw1wguPd:gQZBCCOd70IxCZwQw1wguPd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\075e27249109aefea502a532ed5a0981_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2b6a7b7abfefcee8684442dc4fefc364

    SHA1

    cc01f26649dbe6628e2d29c99a635f2b9f2bc9c2

    SHA256

    d0c2e9f1ffe8f998a0e3f46891be16dedaad24bd9de8edb5aaa7b73282c4ffc0

    SHA512

    a5a3a4324b38ae716d2d62e0e05260f4e6db6339b0bf27bb7dd38766e4fd98783bc19456acc82193f65d8ad29b17943ced46b3550b8369684bbbc3c08e10aa58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d95c2017f9ce256420d421f6941fdba8

    SHA1

    c14c20c694c44096735c2d606a0be93ee4253ec4

    SHA256

    58d252c7a2ca020a6b96f30df5d553c9cd35b773a719861253b67b69e496f42c

    SHA512

    97aa8c41257275373b62ed066c6d48767ef2600043db707abc8789066d45cd0dfd4bb099845ec8d14d27e441bb71c0ed0e9230fb994e627042e8a1d4a0db67c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e19e14624d6d4ae29cea3bbcc502aa4

    SHA1

    c514bfaaa80cd2a129215e6a9516c8cb370a43a9

    SHA256

    b51213fdc7dc717ed250f232b39de25f00003e5ad7e494c7bb96b23328a6a4d5

    SHA512

    7cb9f8b468a5010737eaa9ed0cd782b7d91828e41b29521b696cf1459f1454c23551980b1d340c336d058a51503315db10718d1aebe0bf91ba78359459833d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c9eca038798b6d4cdb9de3c6015fa19

    SHA1

    7e960895430119bc21c5f8dfc429721cca5facf2

    SHA256

    d2b34a2766a079c75f510f08e01ee85e9c14d2fcae9cf523066f886bd070f71a

    SHA512

    59027011e31250d5ae86b4fc52314031e3727c39d0f5adb8be69b14a9dd1423fdb15db99ddf224a0199716667638e8cd0364db16765bd9ae4cde8aec35a46661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f29bdbb7e3932226d534facaaa1770f1

    SHA1

    538cea0b81ba7484248c3a9aa323e21de966d219

    SHA256

    2fa2b3baf3a0835391bfcc5556e3139a16eb8752af93e7bb724171ed323d843a

    SHA512

    b766c879363173d4e8b24a7c1fb67838b7779e3cdb472e31155c6c6df6ccb8273eaeccec1d250202f52ed809e518db9b46a809d46079a7a8c55f7b04a3db0a39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca4de0a38addec72079e338da96f44c0

    SHA1

    16a8abddb3fb7d58127fdf2b3b37dcb5bf45c3ea

    SHA256

    80c7cb1a9e224968ba874a6376aff55f5c0bfd46d7aef52f280e4ac3b988733e

    SHA512

    4c95b0d040d4eca2a053f819e4d1524a357997b11b127c34ea04cd17ac3d8c084a82c4ecf93c3558fd988ffdd75360552c31ca7f1afd1f580d1fd4f74d1eb3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d0fb90acd7b00b7c1779c904052a6f6

    SHA1

    252e3cdcc61c5592c9028ede2e6e5dc622292e3c

    SHA256

    6ef6eb446b57529f1ba853e4af33feab1262510b1beae66779744dd77f510e28

    SHA512

    e940e569df636aa52a44ccf602eef7b37737b1a4dfd844156daa4c5f21a9737aed09231c0e716aeb47631887951eb0fe80edc7a2e3f9a5ea2f66afb33129850f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddd892d9b04384978e7d8b282d3e7439

    SHA1

    28b5151ed6bebe96be657d10d739998e113ab9f7

    SHA256

    4e3e28de3f2694189c89467a1b4f8512fd4114de530b1e06ed0d149ac9c726d6

    SHA512

    3bfa402343be4e289cc5b5d6c11abb637ffad202be99fb296599fe110f91199ac89cf5723b1d46f5d5dbb646996c88bb4e6781baa9374f845b02b20cf48e5cf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d6d6f6f3d3cb1be532fcbdc0fee87ca

    SHA1

    0615988e2fdcadb5bb4e853aba1fbd4f15d54575

    SHA256

    08f4fb4cb1bf7f85efb16d857a7296ef424b8174c8154499039a4a4e48e25fc2

    SHA512

    f82b760cd60c37b467a3f68be0d72eb12ed5d94c6c48753ce3b85f476834501f932cb8f3f9ccd3c17d5ca31d7d3965c231ff8c915829552a702269ccc19a0c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32d8a1e6224b879f0d6efbb0b40f5f84

    SHA1

    db9a26439434f945ddfdab827912b6acfb5f005d

    SHA256

    ad5350239630b67053b1f9dec9baa58c9cb9490c7067d4db53aef1915497e754

    SHA512

    482302eb8bd51e95b442cb167d24c2db4577571f7b1bd570b1baade54199b558ecd60092b8b4658a6a7f87257fe9bc9050bbd3b0b45f5eda7fe21d83273631d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c974a2d40524cfd037720c17f9f6704c

    SHA1

    090752015209fe6065da0213a2a9dc022e1e6e28

    SHA256

    bb46aeda181d22c8f8ce84588136fa05ab452af99e1a4f81dde6f54b933be29e

    SHA512

    a6a209f4be792d0c61c87ecb2ceb937a326462074ac793eba816ff960bb00b90751b31a8f96e8a2527d30509057e938d02884efc8e5c7283ed23c65720395649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b131b48ff92c8abba355dd36daeb2ec2

    SHA1

    8e57df366addb1991b5ff04190f70957cf7aba76

    SHA256

    6b5e444b058e2867aba83d546e712e86cd38000e17a5fdd099dbc0e72fbfc163

    SHA512

    bd3186227ecf5b02e00bc22cc6621cba0e070423b14017edec5234db461a8355558d1e5504d12541919fe1b38c53f979cd0bec8b56c5d94d51af68abf9c27f9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5c2a200328ceb595a40c4fa59ff4e3d

    SHA1

    b9ddcd0a0b0a80b1dce383837ae6f067caf9db3b

    SHA256

    8cfe69ef20699daf5091d877bcf417ea1a5bef96f477a16e4dd3fbecaa807f32

    SHA512

    c6b2a3152319a29cf291c761381561835a778fe0ef48ce47c4dee89ce37dc1ca677fdf68a579b2f278edff30aef73b62ae168370d6c30292f0b527702dcd8173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e397eaed4d3e0a1ec401399384698077

    SHA1

    7214185fe5e66cdc07db20e4ba7ae5619fb8a5c2

    SHA256

    2fd37ec56a2d8d9835d726c7e080b826db4751d1f3b60a8581974e144696e8d2

    SHA512

    d3bbb26240af846f4d221ff4048a8dbe75def413eb52f713a4d0c2b8fb117625021de53138327132d6e7a29b9ed20d111f07a56bcc7f7d6235063f52bf6b9630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4956a52f5674af597e126e9f9fdd41b7

    SHA1

    1e8f24674bf0c23a4c9578f234d426e6a96efa9a

    SHA256

    94f12122389d1342079f6c448594bec2da2d6667f69c36b9a2e40d6b9c1ac7af

    SHA512

    d477c7b13b56abadb0d05b140028280d5fda3f0b5d0d37e25afbcfbe81cc6efc741d018a611952aa993c555074c5cf10e7ec59f4a72d49836f6db97f937798ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f62911be1f7d94f770d162e7b4e56e

    SHA1

    e913f9ea0e9b4f08052efdb56fd5c9993cbc3374

    SHA256

    521f89da21dafbac3f9f1781d8d355c0656cb791c6699633b21f7d38fa20bbd7

    SHA512

    da1027507aafd447990d797d6321f517765f86f8adde402edd4248a0951a6eaa4062de72d2301f4657487190d3fef6ff340c391957737048b58b02c9d315a594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    315dfbf58d0c8ee844b7b1f0bd161766

    SHA1

    27c5df7c1df61df806718e7fc35ecbfb4c1545b9

    SHA256

    9c4afb90d3c376d9219c7c8740db5483af94e7b2ceadf068f3d39cc68384c822

    SHA512

    defb368f7fe605c815c74a185f277112655b376c5558d41747ae1b022ebed48e64fbbb66df2532fdbe80c1e872cfc4bc81b866db81f2953f2a28dfd3711c7f25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b38ae3a7c420ff4411495d193a90084

    SHA1

    b1dc388778c0e846ce60f3dca2a05c43142e899e

    SHA256

    f5be4de3ac236dee516c0ad03aa5cb02bda96cf4c694542413b469bb3d204ec4

    SHA512

    ab5ff754b8de71ba3b64906315203e4755a053fa5fccb50a29efc99f4005decc3b075fe2ea03c2a110b9a5a9ed991738c8879274717b78c49a67e40e42c5a159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b4787d15d55b3c1534240c6e3263578

    SHA1

    dd66a6a634705dc8188575f0583d2b7200d559ec

    SHA256

    d8c717bfc2888f5b610f9b960e5802495280361a16f710f5c8ebef34189ce77d

    SHA512

    86c24776418ecf2c8df1d3cb614a483c3df7ac1b55136622d473d8ea3d4f3a4561cefc92107316f1bc0ba6b8edb07505a41bcfde944c788eaf4281395c79ad28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87e357af94c9a955f3c45b509c4b314a

    SHA1

    5b939e979cdcc2694aad627f9257372e5248cfc4

    SHA256

    1941b4cd7e9aef1f7682293b45aa0f9870974235a3e3bb001d8c86dcae6d87b6

    SHA512

    3a5ff4f4f147f84d5d8e9d350cd550e1f53df2adff130bfa63201fa4399073e0a94a9c3de64748bb4e4281608db74fa5178f6cd0fc32c3f2a724f6f75d63bad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ab0512068d907aa3fe4c102d0aedae8

    SHA1

    51db46ef816261fc6166710f5a761cee0cc98e50

    SHA256

    12dcbedc6b81b1c37fb17235016d96c076ff09c328b1cd2eb1e80dcd6c6152e5

    SHA512

    3f663211901b2f2645de233b6b230ea93e96db015c14330489f2cb7204e3b2f31718be1f8f187e3267cd183fe84fcc14bd67d9cc6b3e60c15ceacddf22858ef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e83b67e225a8d71fba91d64700dd5d9

    SHA1

    28cb5f4957eb89f76d285701e949f731c1dfbae3

    SHA256

    eab105fab48e821f8709a800f41a2e41d600911337719adb2a03f1139ab10601

    SHA512

    8095b6bdc340650ac938620218ab179c53015025eb52833cd5492c748416f2d837de2afb629da0c1b88697eebf76cad8ef23982c6648087e8b1322a0659d264a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4002a51984cd4d237c008c15406fad78

    SHA1

    070f866a5edaf3c901036d09919297f18ed7eaab

    SHA256

    b1d348e64529d19d63e56d24bc8c49d8c87e0913dfacafb16779789def1d55af

    SHA512

    9c1bda9de29e19220958419b84f905cb3b98296f721633039e7a34719e7dd3de80360ff84287857f6c7d4a606f111fbd6d48c68279a019cb6031ad563943d067

  • C:\Users\Admin\AppData\Local\Temp\Cab38C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar38E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b