Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 16:55

General

  • Target

    0ba9a4019cbb6e360edd2db6a0e3e2f8_JaffaCakes118.html

  • Size

    121KB

  • MD5

    0ba9a4019cbb6e360edd2db6a0e3e2f8

  • SHA1

    d5a2dbb2eac9d3c786054f356209fc6ce245af42

  • SHA256

    494a06b3815c340dea725302a0a3a730cb0b2cb453c725b1ddebdbfe5141ec54

  • SHA512

    ef9b9be39d578fba34fc168f7314eea9a0f3446b9ed3869d1b810956308e72033764ad439f45ab63cbd1f644bd43e00ed9a8a987e50dfd23fee9c3127e23b944

  • SSDEEP

    1536:3yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSD:3yfkMY+BES09JXAnyrZalI+Y5m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0ba9a4019cbb6e360edd2db6a0e3e2f8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe4900f51ea28af848f783262f974326

    SHA1

    1edabc587e96f7dee950fa0a3239a7ca0a68e8fb

    SHA256

    b004222a61d15276d535a6661bb8e8e808dec564eb32066262e589838235a3d9

    SHA512

    b3da2a9d9bf524f0b36c355487357b4698b6a283190ecb1ff5d4105377be1ad81b46d9d8fd51865fd19fad0e783bb2d66d9aa8882e7613cd00b723f8821403a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8367df98bd213a7bf2d560a218c4d5fc

    SHA1

    666b6352e78ac18ad5f0a6c8d0f3c74b098f8eea

    SHA256

    875aa3a9539e3166d9839f949e2549866f577aa616754ca5771fbd4b1504af05

    SHA512

    8e30e5145a595222c02b30ca7231688efa8632c5f20ef4e77aff87cf96caa79155fe73df835e09a8e2166051b1f79604ba8a0686c7e516be533b72a697c3583b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed5a73e7e634b6526371e33829e22a9c

    SHA1

    93bd3803d1fc3faffd7327b93e3f0dae1a116764

    SHA256

    a203dec5dabc54997d487e378953eebbac6d1bcb2691f0d3ce9dca8d97151cf2

    SHA512

    19a8d438c13d1f0a7ed3f097ff1bf418b96b1bd3aadeff84f521a84755a81b92a6c6916e2feb67a2d805f2da96861e7dc6b694c8b240c3af9ab84620aa381183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7727f1e90523dd27f9679717b72d81a6

    SHA1

    9b3546e01bb1aee3cdf010642ed2f037a4588ce3

    SHA256

    3de2740dcb08673a11fbb1a4b8acd1d95177d3a064d6365a588ca976aaf7a722

    SHA512

    34b073d50951d36b77fbd390352eeb0c4cd9541ba76e3210c62b324e80da8f4e8a8187fd9c5967119dff0c8ecdb7f584e4919f4353f1784c50594520e330407e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bcb8fac28c73026d8b4b5b6aca7ea0b

    SHA1

    25c3c840c2d933597392c8c169e144f112538145

    SHA256

    5c74be0e0395b000627379e0ba81326d9da8f78007cff7f3608bdacb82cb349a

    SHA512

    7cd1f72321ed329f171532d43da3d5ec62a8bc098f6b525036e4edf4308da08605256b7fde67ed12e51f172d53db59fb4ed978ead1175160b53f985a51dae627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    735762ce77ee7e454b6cd98df0db50bc

    SHA1

    e2035f1157bd64d8293e051bb134647e366feb60

    SHA256

    d6ea60f96b70e40aa094def55db52384e4b462074ac51a76befc2b5cfe13cd42

    SHA512

    fecc6eaecca908d5e81db14feb4183369bf305c990c295797163a510125ff971e8eb2b6f9dcf0fccc730d7621a0859d519a9b6f431c46a5586622273c17e0ba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6910f74377409950c43c2ddba3134a9

    SHA1

    1b5ea507e5f3aee7067c08ece69c26d561aa615c

    SHA256

    38d9cfce10a13e2a6e2d2ae8de7ce11f76b91350458cf5ca7f5b5ba74644d96e

    SHA512

    2e98aa0351491b21860653bf79700a9880bfb7369b0f0a765613cf12678698cdb2541c4c5e2f817bd6390c5aa0d8b6f982474d5a1e335b3dbfad67df94650121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdd38970a704d155128e66a6c25e1716

    SHA1

    ff1d0a7df5eaf39619cbcccb43d07535e20fee86

    SHA256

    3bd45b686bfcf4aa88b7df7390a620be1b78ae0d6618d409b34495b0a78a257e

    SHA512

    d633abec18e5a45b5373514e0bf2519e66ace0acdcec7e8d034f63f424c1799e614f983bb06017ef5d1afd7feeabbbaa94c8084ee97cf9867b03a1016d9449c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8193e3e00e03f6f8fb43cf65543208b

    SHA1

    8beed79f585beb5d3d441549d619471d53bb4c5d

    SHA256

    abf7ae96b7a0fb14f917885046dbeeac4d1084e05d207f40adbb899bb3d99137

    SHA512

    0e4d40a7fe37093a9c19da106ccc9378eb0013e268281f71c3a41e46a18677835cb668cabf8b7e101b7fd8fa590d988832e64952e7d2a24dfeadf876a056bedd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd0655aaa3a29d2638ea64b63951921c

    SHA1

    bd56aa0caba733435e417387a03da123aac91aba

    SHA256

    5ee2e623f584259299d01d24462bd91383d91a1508818ddc083c34fa57c596da

    SHA512

    57a226c0718da3c79e8b30d1b6101dc3249a0ed7cb051bbb2d51612f86fc78a8534fe5ecf16401ad6822b642624edf89f158724ef9a20201b20d54775eda097e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e320d3520d8c0d7edff87f7e3e15825d

    SHA1

    ecbf08a7b284ae4afc048a8952511df847070fdb

    SHA256

    7a5afec2cd805a90b93631169162781cdf925bb9c3d4cd80b1fc499617a2f35d

    SHA512

    329e307f92a423299ed60b1efcd41eec30174c7ec8be53bd17f8a885c16863cd349a01938c591466cf168990ffab98e6eca6b058ee4fa5b0c0697e64004909de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17809c2ff33fe2936ab40b2b1e986f29

    SHA1

    b1c6057263aa2d7e43c096ce9828c8c7a7630cc8

    SHA256

    d8327be41f08150bf96e8feaea7a36e983e809c177dc2b9e4f1f23286c0c3a29

    SHA512

    181a50fbec2b5740805bef20882fbcaad38d20cde673a770ab1d644316d56d178c042c2dd7d77b845a3af2324631aa4200f218ffa7b7e554ec5bc42a3f02cff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07e9236f76519b18c8910d5bfc38d163

    SHA1

    f520bc4910b6aa11b47fbca7ff1e168917ea8012

    SHA256

    de9894aaab08135ef8bca3eb6c8ad31d8c632b40331aa76a92fd8e47c728549b

    SHA512

    a3fa7aefa5c59757d53a2e9aacc78623adff3f220611038f237be9f852a178c393668b6e7a2347121874d92c4bb2c7f66f3a5f1d8a4c8d8a1ba8094187da80e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc3b97286aade416753c871de6bad97d

    SHA1

    fb0a1f63fb7cdcc5cbdce2d20a595f35f936cfb0

    SHA256

    14a004f0e6e59dfb3c306a7dc7fec7e45276224755a1b002e0709c5fb8fef62c

    SHA512

    3ec0cd7c712619a63b3a02a78abcce4e73a84ac0daba013b5dc6224516c12800f9e4e69d6c0707e111a222e3b927235acd6bf2d05ef1bb1145ce4c480f0ee99e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab69eeca3f8a381546bcbc987114f104

    SHA1

    31f6fcae6c8d33a724c4c44f5036c349100ba03e

    SHA256

    640aa6a9e46e5c7d747055ce7e397381c1be4c48a50dee4db97a78592b694ae2

    SHA512

    a37ba6eb4950740f9c168269f4bbc36938ad22c8f2017a7378a5b0ee76eb7887e3a11da363da62f7e69e0b12193ccfd6eba07a944c36e2cfa78397d9363c1d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad722baf94946d390e62653208a43c8a

    SHA1

    d913b6b6b2a1384ca03d505470191b79d8217599

    SHA256

    15f89df46900d3cc5b8ed6efc441729b06ed2fc1530a42465189c546106bdc2f

    SHA512

    d1f75bc8d336afdccfbd6f840a460f7ddb383cc38ba858cde13f3758aa54a399d7579e28815f6c1250b818a3c24e6692b3d8dd0f688c638e41ef171e2cc81ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6bc8267807891917095d9d5c3c469eb

    SHA1

    dd78c4af70c0c9bd1ad21a1f5ed2dd1629824f46

    SHA256

    b132de666cd18906fab8ba95387f340f59a506dc33e8a5a9a68a4976c791b121

    SHA512

    35bc678a4b7d82ede06662928208a863033e0ffe03643628462ae692fe02a91411f54273912227167cde46591da4032a9e1c04b614f33bd72b07bd75b86890e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c08b5d1dafe51ed5b8ec776b3c3bf9ff

    SHA1

    f703e9632201accddd53580ef1f1ebdb26351d8e

    SHA256

    b24e3b4246c0c21b8416c8a86ef93aa9efedfe011bd06c58738ff9b33ecd4067

    SHA512

    1467c0abf1543f6dfa39b806030eca83015ea519500b1290bf6354b199341f00cff75a4361640deaaab4daecc206d7e7daf2566f54492bae56a8ede3710ab46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b512ea35f58079c69fd05fac6b05f4a1

    SHA1

    22176c0e88f5614100885d2c042185dcef223e26

    SHA256

    e98c42da97701db2cb15239d481d093a007e2148bf4e0eb59a93ee10e7418c73

    SHA512

    6cfea05697a59d84c242346009f986b31ff0cb5eaf0d9ff8bd222a80fcf1bc600c773615104ab307876d2661a943b339c780144007457e40514d665bb1f15ce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7a9927a39cc8c29a07889524b174541

    SHA1

    f2c0a2fd5e1a8570654bb0588b98c911f0cd8040

    SHA256

    b0ab2d40655aae8eaabca37cd99ece3b129a07efa9517844d3fc63b199e9faa0

    SHA512

    34c305d8fa8121645b6fe7d1a86bc7d564c73001fcf2227dfa3b66c924c39d12c1dabb62d59e2ed0ece13cb338be8163cfee5301b650dbb59bf22c267835ac0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e22bcf35bcab5daecf258f98dd3de627

    SHA1

    827c728b46d991b42c21b758e32049b8f0b7d33c

    SHA256

    0725d99a703898170c555ea4931d473a644bd3939ec2855792c3a527c26522f1

    SHA512

    c0fbb2d39069ff9b9a58cffe15a03bbc40cc2fe2b6406157e87e82f9b06134b3852dfe1f695f67a5f22cf12a236c9af83c42ba54c7a21ea4fb1d1a9020552911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aa736dfef72319c444eda77de907343

    SHA1

    501ecf452fbe8bfa0b273f5538eb997b49e8e823

    SHA256

    b67d9f9a83a1882ec249bd939361d5ac10b21416aabff1035e1a43c0c2a2d8a0

    SHA512

    e64cf9eaff2e0bcfe99f20afafc48a1d91f935c0b5fc6d3e9f77743cd3dce4c442c994d1aa9b4216672cc811e535a43fbc4773699be1ad095d37152369e22b38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0230cbdf4cc7ee264a9e6c791f8e62b3

    SHA1

    8b6d2caaa6032aac5242beb83916cfdf989c7236

    SHA256

    50ddffa9254a0b94661172d47ee16d22f3e0b4b309040cb15c1f7eee54ba1773

    SHA512

    18cf9d1c82ab5f35611dbf5662e54891356f22c1e782d65ef2553f06e115bcfa4e627f73ce1969ea85552b259c9343d434e0e593fcd8d50530330401be29f99f

  • C:\Users\Admin\AppData\Local\Temp\Cab8529.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8599.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b