Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 09:36

General

  • Target

    0a06557368603773dea3f33d76644a44_JaffaCakes118.html

  • Size

    5KB

  • MD5

    0a06557368603773dea3f33d76644a44

  • SHA1

    3d946c94829a32e29df49366969a05a0d0e08765

  • SHA256

    9ebcc4e08bde9aa7c09f8ae3912f6ae6b9dc826b32fae6b866a8440b1499a3a8

  • SHA512

    3a21a2aaffbf717bcf262ee81cdf71655538863e3b43068c00db604d9ee67dd768a897f13fd1714d78a0268ae8df450baf351e34f919f47c639b4368cb643491

  • SSDEEP

    96:zUbwzFog2PU1DV14t78kwzG46gPsf765v9rL79IRzxS7:tog2PiDn4tSGhI07gB+S7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a06557368603773dea3f33d76644a44_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2120 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b4d406b9b2a7512bab8334363b13ecb4

    SHA1

    aef94d7042dc192d5b88db3101cb0573e793f17f

    SHA256

    376bf5604140fff399a15a94adafb672ec39002950d60ff97384bf2da9201130

    SHA512

    8b60475e818611fb19867359bac9afc8cba61cdae521694b476d83145a68eed947f6dd28b8c102a42db17172d7b9dbd17bce67e9b4b951e873d6bf615148b487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b2728c6d88f517b0b260cf95b58572a

    SHA1

    6a762e4563fcedc8d0c1b836967bf4c04ede952b

    SHA256

    a66986a1e753bf6af05185cefa6fc65d89baf7d3c1ab4de059f3b9083100e442

    SHA512

    3152c92a06f560e0cff7c71f3cf3906f73a7ef22373759bf24c412da7b3f8d0957c7a82eabb96f5f8091200ee524bd43e261c71e01e4def982f2162faecba212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4d8f1f76e21371ff9aee0634f31864e

    SHA1

    3e92b413f20da2488f900bdc04e4d40953ea3f89

    SHA256

    1dae88bb8c8bf3a9041dd86aa2b9d067b50177ab3cf9273dc0a92ada2faecb0a

    SHA512

    59f3dea34a71d4922f2accc24f323d6b02ef7447dc153966bec4df857eea0c0841caca9a47068e2f2b89e2575ab82e02791748f0a73616bc1fec2414ac4786ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cc6c38e3d508f833d3a12f056a3a7d1

    SHA1

    37491d729e61a2ba3832aa18c2b9dc51f2f4ee48

    SHA256

    724da3dee0b8ca4ba1f45618c4e5ab7cbba79c4c757e39c241b233ad3d69888b

    SHA512

    40519becc7ef722aff8ce926f080709a066d4f8e6f06edf73ab4795a040559d7e105c31cfa0147f8ee3cb18b04b304bfe912799a13817e3f16e3ad44152aaffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da85de5bdc255df492ea1da2aceac34f

    SHA1

    adcb0e834dd8f5f235b96a55c22c75e94e4f4b0c

    SHA256

    6027536f1e213be1f7ed7127f1b387847ba508b4cf357c80bf903610a2aebc41

    SHA512

    70cdf90363ee7d961d9d2fe1a7bb84e33c4986270512eff397c57a5c79fdcf295f97054cce89b95fcd879aa7b2bde05d17e9a2afb74227807bcf1369d85f7974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f24472e95f2e50cf067aa25a966277b1

    SHA1

    e5c433beebaeb33d86bf3014219221f7534646a1

    SHA256

    3d9806916f48d8dd138c721c8609b0d34839a3316851b10563f5d2ccae22a2a1

    SHA512

    b0837028fa5ddc2b139cc81ac71fe428775e8f8a92cba890f7e14e36d04931d346b5537b6bf086294c3bbd725edfd8eae7abc0f937575f857b73592eb57d3c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3df38ebafd6167277093b40453e43a28

    SHA1

    ca78ee88319129a579ecfc9f2923a82dcced6265

    SHA256

    ad0a28680b2bf53725a90dcf3ae6b4fa6679e2b836f49695b66b4d119c6872fa

    SHA512

    185b5b50f87659cd7e8027e170c02685942b116796fc3b7ed63666fc6013fdcc0ef43b655d32186009ea5e70956b8fd181eb41c7b9e61483743b609b081222bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6788b52df50a19183ad4e756ab4f3365

    SHA1

    cce610f7d9e730dc3edd2794c253ced449133be2

    SHA256

    3b2bf6e164a0300e6ea7f99d487f358375f3f701c136320f6de1638dcb274ce1

    SHA512

    eb430045463b9276f808b5f010bf48abadc4e709c57f75c06d06deddf06192e577b4acf500ccc970cfd07b4922f25dd92409ac003ee7dc3a75a19f2fb8df588c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2360c5988e607411b24fad7408de911

    SHA1

    4fc04abda3c02ec5072a1d9ec55e0d25edb4c457

    SHA256

    da73ff3a45addbf285e978b394bf9e721c41cc9d81406703be29c6ea532120e0

    SHA512

    0a23161fdab31b25461f722be04513d497ea1deaac751d530a1374194033ba39b15f080dc2795a61abdfdc2dd4c920982d27985a19b7cb5ead9e0083c0aae352

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81c1efe28f7928ddbbcc3c74cafad24d

    SHA1

    d6ee9ce233bd97fa36828a7c9ba8f587c31cba6c

    SHA256

    cb415637f23a9017758afe73fc326d79a75d6daaaa4102cb37b81e4a431e9d46

    SHA512

    fbff6571598996b239e95b50c2599229bb8b64348a8c2186e74e2d6660d2f9eebd68a492947c43cc6b3b25a86fc18e370ae133b484efa89cd61ef5688dd3410f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    412a3bdfb461bb1d39448597d29da84a

    SHA1

    92f7204cf70ef9ec9ae32aa4ef4a15a5fc8d6cdd

    SHA256

    0c602eafd8c84173f6f7cd76545eec885b98d65a4fe410afb3d214b76180d3b1

    SHA512

    8a6859e2703bcc2ce802a77dade427ebc43d418dfe1e5267e6b89e304dd2b9188b2e632602d22b412c575ea0203c9c174b24f6840c270811e99d258ddd220768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76a9595f604d665ff6603802d5cef206

    SHA1

    62b65ff909741efc8280fe2afbbfada95969252d

    SHA256

    3078c662f5d54baf4717c82a58b2c0582ca54cbc51455b29b70e57ded570a760

    SHA512

    2f72ff1e4185aa318ae16d769dd780711e3bbddf9a068d36053c18bf9fdf252ac21f72c90649e7fe12b01a442e5ddba43590b5caa0a038796812273cfd5e717d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14cc64f6bd7b548a19c1ef39499f86f2

    SHA1

    20dfbe14d9a95dadf56f34464e299af6aa97fc23

    SHA256

    496f52e711bdfc416782ccbf4ce3397181e37e6c98e4f2082aa1c731af569adf

    SHA512

    c5b9a4583542c9dfc1e1aa0027465863faa2bf11074a2fbbccc1fe807b2cc58568e7e64313e28e0d7d96cc057b9e02f0ce00261cd95ed78ae800bc21d5032667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faad5abe75c86d6bc3ef8312a26473b9

    SHA1

    c2fd92999d9ff792a30fb517290cdcd4fbc103ef

    SHA256

    facb41bedf657fdfa1ffd49782d809c202c477874aa21b740ed8985c0babca5d

    SHA512

    f21009a97b4430a6ff8eedf6f0f8638e8868dc92d57a66f39fbdfc4a0278d67d0d3883618025f63cf32f300cd6d0041e3f86fe08f38c0a2c869e902ae4de2b55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    debf96fb101856df4d55de2c841ee6d1

    SHA1

    ba53488d143493b352f2c0e6793d8fdd9585a8c8

    SHA256

    e6d6e553d6fd27635aa01f50ebd7e6194c799abe077fb7e1bcacb6a2e33c4277

    SHA512

    987d339a44f144eabda920f4e6b54e569d5a8e64def9c4c02ab33573570258c696771a711bc23337772abfdde883e07e2ccf91b42fb67f52afdd90f8b8c257aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8f869e522f547712c5523283956acd8

    SHA1

    72c2619050beffee6622c4814363f640b2b27ed0

    SHA256

    f3743d4786852c66970e16ef45c88af2c53f32d90d8e2bc95a9dcf7efca97d76

    SHA512

    d4e4c0298c80433573226e9192c4eb74179efe8423cca97164ee872bb3d6ef0fd6e418774c949fc14fd8042edfaa2bc56c614821373b72c5b41cb06e6b666ccb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c75b0081c9f1ed8f99d7765ef46d2c0a

    SHA1

    e5681d51eb3397d13035d51d8ab5615d4fedb013

    SHA256

    0fbf1c16fbef58d38a3be956091d1513e5c9d08e4a9f490d9487c56b635024da

    SHA512

    6e73be16a8f31ff8dc753c737ef66a1727244c095f164ded58ebd185a69f75d4e7c794246faa00dde8d311711605f0a4db749e7b018a78be032110f557eb8efa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fdeb51f677171cd0ca8cca03c368fc7

    SHA1

    0181936fb4b7fccb7c51f7a75d9f239447210faf

    SHA256

    e0654b6dacd6f32dc970a0647219160d75955539d11bbda9548cd3e3955ae8dd

    SHA512

    1b7ee722823bb47c100a2d019a8997889b6cd641e185ab222da3865569c3d18bbcc7a271fc3c9d6fcb2a0b5dfad608dd2b0f823fa55b631ce46f29ad88a8d7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65904fb3722e6991e79e7cecb90f4076

    SHA1

    b6939f9902b33b469bae2aa0ec7d58332c577082

    SHA256

    234c2b5832ea8053282c38527ff55c983bec82030ee54e1e6ba98849c430c3f0

    SHA512

    c251ba31baff506756494c1f53016041823f25ec158a7b1f15d16f537b3d5febf8e19ab4a2c03327b2dfe4808df9c37b07bc9b9e95fd7fc7bff80fa965906183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc8f8b67b64bcd82fdfa848bcaa39773

    SHA1

    d5dfb8786ab08dffd4614ebf75f8f2004f2ab835

    SHA256

    4156676385c1d30d47272f8fdeab3e8408a6e47ad8ea66bc051b7e996fcbf585

    SHA512

    f619ce98f0b0107534bb39fed7426513e7a0903f3b37ac1f689ddbb8c7b60c05ab1751c84ab592d35cbfe39fc2809e29ac35744d3ede5e470aadaafd7e73b9cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7e90cc84205401e1e43f4807bde09334

    SHA1

    0ee8aeac6ade0066ee37febc48098af382c91229

    SHA256

    b7dd1a6e308b3a61f3c65c8b8529fe346b237e9f3f0aa9d46428dce043f9c27a

    SHA512

    153b0b13ef291982b4a9b5caa14bb5f936fd9f301f6aaf4130213eafeb8c0b847ee38dd77aa2125de2bce2b486211b6f2b52c33339a0510377549876c834a438

  • C:\Users\Admin\AppData\Local\Temp\CabEBB7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEBBA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b