Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    67s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 02:58

General

  • Target

    088c2f994dde2990668a3ac070565d80_JaffaCakes118.html

  • Size

    35KB

  • MD5

    088c2f994dde2990668a3ac070565d80

  • SHA1

    b4261e7d898063976df255fe83837c0e6bfb755f

  • SHA256

    bb61fc4a63b30ab31c0a66a8f32fa7a03979ccf768424469c957e0662777f381

  • SHA512

    10072e1e319d03b8fadee32030ea6a097be2ce94cab56cc564af949270b4914ffcfc0cb8eade600fbffbb13522acf981b5b00f2af4c2b31d5445016203e987fe

  • SSDEEP

    768:nBdANJq4V+UcBrWDSDYlxLc03qPUw8YPoe1WQMwQEPW1yqWa:BaL/3mV8YPZ1WQMw1+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\088c2f994dde2990668a3ac070565d80_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1080 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3000

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    06584747f5f899fec618874d0fc7ce96

    SHA1

    30d71841313ec7fb0c4e3d9f048ae8f3e0c09c71

    SHA256

    f770b32589081e63e479cf33b7cb2ba58f3b53116eb097948c856b87fa4a8e15

    SHA512

    3b8d09220f2fdb88ddfd480fbb222dc80da2dad0d3c3671abd390712e481f9731b0cf5bd7911395f26bc0f1a5842f4941f66b39aba2de142e9ed9dee7d14012b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    934ac4f46db8d0cd9905645207298aa8

    SHA1

    2c150f8bcbb215c6ee850fa825171dcd935ec0ea

    SHA256

    6e09f1cf1ba3cde242e5bfbcf5b6d880ec9f2e8907cdcdc633b1af3d91bad2d2

    SHA512

    777b0146febbe6dd5a35667f72426764ac41f025fc5039d3c56bc768ac2e26929996a39add5f8dc68f27c9ff76f666a0a098a8b858631e24afe9bf52e2ec5f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    491a1b2760232f5c09103fa7071a4453

    SHA1

    ab18bcc5b017e3f159b903a0fcad9ff66c4cc910

    SHA256

    c3953ed8b14f6cee00babcd0d21441816f1330f21e7290fbbc784054eb06fadd

    SHA512

    584c3de8265e3276f93574e50ca63ae686dde74e24a577648a4c82676e9b2ee2b604c5ecb09f221c6d2698e1bc7869fc568b350d3a8b5825ac7129bdbfb95ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33608ecc3f9d420287167b800d055961

    SHA1

    f31ca7f09e8aa7ee7cbd1db8df0c4304bf1108f4

    SHA256

    cee95044a728b26810540fcb450a3794bde556914420bd263aa2f23fe2bfabef

    SHA512

    ae39d770a37b6399402330776f7ed1ddc2467e8c2b88f192a6c0f7b3f685f54309b030592dcb13bdda9426612b483d9d2a99ccf0e282542cec56258dd57f79ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c09fbf6814e55654cfc73aae3d2b76f7

    SHA1

    c847c267b43a918fc2e530a63531d8c03202d583

    SHA256

    af6f656aef038f47f12cfa0f93422cc64b577fc6d2749a9f5b9b6a95fd4e5811

    SHA512

    29a51e894988a33cb35ef4ca9b8ee3f55dc8556305758bba8ea8ba5917f2304ee7f682cd2e4e09cd7f46878b46c87bcc815afab8c320496bce93b7b78814f3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20254110ae029bff009fc321a7797bc6

    SHA1

    f110c889147691b9e56c6bdd929289db388574b8

    SHA256

    1ada3dfe5329cbb74422345c57716b5b678f657985a102de563cda7862297e3a

    SHA512

    a5cd258ff45f66e42fa73858890767e971acac928e8756cda34bb6d8d6a6c833366a5c8fbaf5119e20d0d1056b78d800159c53536525f54228f398499e3df727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e0d5208b3951481bf77a15386fe9f42

    SHA1

    2d58f4715e071a901befdadc70d132b6e3049c4f

    SHA256

    5baeaba4476d159879def37b8875c501e493feca846afa2c9f4f3692ad41909b

    SHA512

    da50027aca7c3ef442734cd797ffbe82fd2ca8ef7af459ef72077711382457517e6260e36aad555db2d945819638678913e0185ca00221ec58b94fbafda89837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55958056610acf8e7db05ba42dabb1de

    SHA1

    e6b547206653d025ec686604655dfad679d7582c

    SHA256

    6474b523d21de2012eedcd6781c9af12df7722e6bfa3b70b74ef9e4b67ef7dc1

    SHA512

    fc599c2cf104d3d4c30a5834fa5ca3760e54e3c7c274184665d0ff80e3466770f6acc2246e46fa7f13f0d04d24d8ded6802043079027b17cd2931fce47f1ddb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af9d4c98db191856ef052743d6e0e894

    SHA1

    6d4e2e5c9c74585a96e464d9100a525b77d13d43

    SHA256

    f2804e262dc8cfff940e446550eb19b39d61583fc87bc9e7531e3264d2865302

    SHA512

    15e93d6977b924a1dcc46e4c7d9a74bff75318788412dbcade4f12a1a3d20141897556f81e0f2a9c98656bc270eb553835121917d2ba1b45f0063f98d8616479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d5390b3d689858817c61ea94d99f60f

    SHA1

    d1468567f380d49a8e06b0637f78b5c3f4e11d2f

    SHA256

    3043daf56d250837f0505e3f9c5713e5e3f9ea5bbb87c47456e60b076096eaa3

    SHA512

    88707309cb102ef291b735acc06c748c1e0df3e73598020dd0166525d126cb107ec825a36360ee4ecf546003c968670d3fd4e4b32a12ce1d8d393000109d478a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5059178cb8130c91ff633e31cac31551

    SHA1

    d55f483b272b4ac77537df19a6e989f45986fc27

    SHA256

    c122520ebb5a9036d50751dbf7a019a19bb82bac3935715a761a487623ce6183

    SHA512

    0f7fe87d9e004e7b5aab4066f21dc4188ad11754810a422dd720f2efd6554d445f0a221c10e8c0a6530aa6852adb71771ab1c4f742ddeb907eaf9147f053c19c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3850cfe0928c80529473ad1657f9bb10

    SHA1

    c31c0d3ce4cc7e9e17b2cf7e5a0add6a125c455e

    SHA256

    64aae9ffeb2dfbbb00de5c627a1b0b1c19fe256d99a2f565b6a4ca35652681d4

    SHA512

    14dced06b8d3202b9239ac944417092132b104894d10e99a4539ac53406e49483d3b263d18f2ed62bf99dfbf8c48d88544a621d6682fa6aecd57534869be9074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    101204f62010f25048e502af51b281fd

    SHA1

    720d45ec708dfda1a83b5f7562610556e0ecee49

    SHA256

    61590fcde10f0d0e4937a28524891a7a68564353ad17c5e82910a312baa23b8a

    SHA512

    2ca148e1f59f1951d262705e4d9f3ec618829f2b063be3bf03a3ae5422483c32db7bdaba79344559c0f976d6310b354ca6f76ca4e28f11ee4fb94b63f1d6fbd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e0a9c4c51d9812de9892ae7c9a87ac3

    SHA1

    bfa769a9536b670d50cfeafdcc3cc367a419f1a8

    SHA256

    ea4d4205d2da53a2702a37d803cd69e2d1547f39c4761c8d3ea94dfce7d504b0

    SHA512

    4c54d7b5753ee3527a8418e385d1898499d155982a3b1c3084350e8a00a68431df05e9cc64381c4b6cd96c2c0bef476e363ff65b6eb06c1c55690b2f4e5fa1a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df1a0f49769f44b18021686ac9be6408

    SHA1

    9b37596838b06ca10f6ec52283e914df7e9ad389

    SHA256

    1ae59c5fe794e919850b5982f3ab84b2d183076b5b072a2a0ac65e2595a2a2f0

    SHA512

    cf9a76ededadd0be427619d04c8473f61c3f46be114efdc2ed91fee59b8c9fec23bb8f8d70ef0e459e1f0d751bbfafb63c572121ceb8e1725c8261d703b2a442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    251359526f5bda9d9850de4f8e27c449

    SHA1

    dd3fae82f42b2fc1be5d0c840df9fe3bfb07b853

    SHA256

    8bb7c59785c2ce46f0525078d492a42e76c794989c4b35c8398230f2a37d5b71

    SHA512

    b3b36cdfdaaf080b79cd45d769866c43229494e862879baf74b10d9d8dfb7e66708fd79179125a709a88900b0290ad05f29590db2e210289b228728d258bcee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    addfa6f566ca8baa9d055aa94808d4d1

    SHA1

    962dd7ed6438ef3a863de07492e11363f51f191d

    SHA256

    87785702bad77b17f6168eff5fc7dca4c52053335dce7081f0be616f47b17127

    SHA512

    2f2e2b5b330b9b8e9f16484c7219b79b9d63576a1db84ea770398a44845614ef7ec2401a8f2b17f78c1c8039d112b1e20d46c109c693a72e198c2ca5621d9c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5bbc72baccc2452ae28bdb7e61f3898

    SHA1

    a841694a3767d7fe5a1d3320121ed706f535ac79

    SHA256

    d8ee47432d45c05eab9001477449dabf8188806f380735024c85c318ca70dd14

    SHA512

    0a55d9f38c69f3e491563c5b22dbf6ec3546ab47091701e83d4304cf1d4ae7c0f6bd25767c78bcbf5dfe19c78a22cf29dc9f4421fd45f0c65b4610560b822709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1fb66bcecea2a25d4dce4f64cf98a73

    SHA1

    7163398e5234fbaa725f6491461f3c49cd3d92ab

    SHA256

    b668d8b6ebdbfff4ab18ee3cb8856e109a0eca2bd4c6f0f6891499525e282361

    SHA512

    4fb0b89c08de2d752b4f9425ed098f3b709655adf26c3c0fd19c71b11296b1ef476db93b005a262232372c09a9b06f37c3ca3f9645e91cd49fc3ba5ee5053ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    022b1692181912ccc7f118d76fa8f16d

    SHA1

    11c110e458f3bee6fdd036284ed81404aab1ccd9

    SHA256

    5b744515943cfd79b93785d1b24fc069f3d0eaee1aa3701b1f40a659337d9505

    SHA512

    5c49c81a06788a829a1f59ed44fbd1af412b838b0bee246353625fecabafce94a95081abba9e12c644a06fffb05a41cdf03a1d5175bf2eec18a2ac65737454ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02691c63c58df1d49fa818dc3e5a9ff8

    SHA1

    c9d92d439a9d426dbbfeb17f9fa3923ab47c9736

    SHA256

    6fe81ba54f5a03627edde88cfe343aaaba9db1ecd6d0951988db6f61380ad814

    SHA512

    a7d2c32e713a55ed5c346450203f2241b40507367e9343aa02dd12fa5f2ed642451ac3f80723b256084ca2f0860edbe8922f1523ba8ddb2500b4108e89fc8dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1143deea6db9155108a4663c3a9ef3bd

    SHA1

    3930140d76193022786bc6f998c01f3f3ca30135

    SHA256

    218095d9bd30c772b76d000c06d71f0c2da6d4f180ecce50c0d6de0b6b1a0c39

    SHA512

    479041716d55e04c93d82610e49ba7360de6ba55e29c830dfe11a7c0935ac9f06ac08f3bbc1717167d9b5d0ca721b15de0e8aea97ceb1c23b8530575b790d9fc

  • C:\Users\Admin\AppData\Local\Temp\CabCF32.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE63E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b