Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 15:05

General

  • Target

    0f4aa8c099d8fadd6a186afd83228e5b_JaffaCakes118.html

  • Size

    69KB

  • MD5

    0f4aa8c099d8fadd6a186afd83228e5b

  • SHA1

    1f981e3bb60fe2b081b53021c9dd34dd346cab7e

  • SHA256

    ba6b9294bb8f35278f4e3f083e856eb5fa08f228a2d611a2ea0de972b1832d34

  • SHA512

    2d06bd37a9ff68f2ab304833bcfcf402e883546faf3195f81912bbc27fae4fd7da5503676111c5f448311d83588a2efc4885f077c4d774cba3a27ec54c1eae94

  • SSDEEP

    768:JisgcMWR3sI2PDDnd0g6sdtRoTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRoQFVG8sB:JCcTSNen0tbrga90hcJNnspv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f4aa8c099d8fadd6a186afd83228e5b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2504 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a42d457b545efe4cce88809d3ddef35

    SHA1

    fd2cb07646f8eee317692e899b468ed27f658a70

    SHA256

    e26a980ddb206eb73765a1d6329788a4c0761be17373f6e06fb8777c2547b1ce

    SHA512

    d3a36d26f396ae37aebf64cf500b088f6570ee2c5b9ccf15f7b6f99a6a1dda12f6e7999d692f94e4587b449dfcc37ecd18fefb8a073469bfb172ab187d763d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d344145900a2f3dafefa2b377c1cdb

    SHA1

    3ae815ef2582b4c50574cfdf329ba5222258aa42

    SHA256

    d56d8ce7a8717cabc5587f8790176302a3f591bc2c39b9912b53f9ffdded7609

    SHA512

    654eda2363254c946f991b09ed6fe1e49d4c16af6759b479fe103dec35c8d4d0ab06e43f209041c4d7d6b843195c5dc5f9ad5042821b63bcb3936eebe7ef2978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e489469219ec0a4cdd20736430a6248

    SHA1

    65eb1082e16b93a79bf1c8550eb03935a5a07b38

    SHA256

    5001c88d1d89cd7115139ffd4c2ae3782e81332a64141271b65e2125f0116d76

    SHA512

    662b9877d02c29eb2ce651f376fd5e7edf5a1b2de80e0d84f3c287fe79d28d9a5ab192766ad640a669907f1eef98d25cf0ea84db7dc163f11de4b3e34dab5b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53bfe9877e55d5c7f2d7d8c7822b4649

    SHA1

    09881c7030366371b89c7a97e97987b35ae247f4

    SHA256

    23a2e62739861c56ca7ab232c34c1a5c6c09781a89f87501ef335e5d10085443

    SHA512

    6d3eb5ac8e88c2999d7fe4fea867214cfd94154c194c1fa2139c6eef12db67bd6a9da3cd60bbe7622e0682f54bdaa3d8777370843b492fc7017022ecf2944de3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7fd4b14b338553e54970f41d394ed64

    SHA1

    6e5b5e06f58a104693bc4a1fe7bed94a611c047a

    SHA256

    153922c76053ad25c22f2ba526b0db38223cc60942c961a339478b5b0090c9ed

    SHA512

    ae4d699d935a0c9a2423fe8a567c76772730d921df6a8ec618f2f04a95f540a95bca42f79f3815c4e97a2dc1ce53e4d178047f19984605cb925cec8ce0cf8501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19ccae6a71238da5af46824241b36703

    SHA1

    a5a87f38e45202a5cc1e8848005f3faf239edd64

    SHA256

    207cd68f8fae2e121d22b9322baf5307f60db84ce34327795fa3a649a41877f7

    SHA512

    cdcf3a562e1d6ecb0f788f60c3690e059ae37f88d3643705a9388abd087323b67109389415bd4f24a4527a007f04b85e2b791e02ec68b8e493fe634d41c35d49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28fe6671c98146377e51c02679a384d3

    SHA1

    84d50338e0bde3f65dfded6b0e52504be05a9726

    SHA256

    05f0a3cb5f2f425633a4856b1e7a553e4cafab69425ebc9c7cd7d7758a1b5eea

    SHA512

    9acbe1233db7426bda54313e6b8ee9ce3942e8fd40c2ae384be7ba0ecb230287095f2a9c0739698f28d2be5f11e2c5c23862a0f4600f889f8da50a94a9801f98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f493c5c1e9a197368092556d21021ad

    SHA1

    6c91e4197eaf8ee2a6088cf3e8788fe96440ae30

    SHA256

    db70a35d291b71d1f25f5a64e60007c307d8355646a12a89c9b355b8f4f0aae3

    SHA512

    6b95d8cd15ddcdac648bd387ed3f870363ef0988b124759ea29d35d23990f732fc71f2531ee959447c21911bd9917ae61364537de7385d35104df6437ae0b3e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93d93a5aa653cea181aa160259cfa5a2

    SHA1

    200f5f69e93223943b9efefec61b14b6c4a5bb31

    SHA256

    9dc59bfb1815f8a5b6c705216a2b88fd9ffc033c2aca906c7d0db08f01bfa256

    SHA512

    59412c2246123576763cba700a79168b0db619da0688245c731b1c2865f87b40231aa48755e229678e342bb3e4adce2f97b8737407656c36bfad965260b0190e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbab2c95011d56cdac74efcf1fb16e7f

    SHA1

    d3874246b84f8ab8ab40cefcfb1d38f78cd609b0

    SHA256

    0b1f2255544e74d4f4ea52a4729b92ad525b600dc1b750a19546cdb5f85d2469

    SHA512

    b7e797dcb4159acbbd41b6ad7f344ea6879e5a3754fb57d5177987af65090f690dba2935c3f8933938f60b4761e4f171c8f9670c21945ec748a9c57c9253b28a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffa59f7eba36f9afc403202646311797

    SHA1

    cb775402ea24e551c822dfbb12eec79b70174fb1

    SHA256

    b4b6df69bf5c5b96037961db43590261014c62b0cc78ff64e14cf6306827860a

    SHA512

    555da0170e38fe0a11c86588cea1b261a5d4ac271e46ecde8b12dab4d33e585246cf3d0ae52312aaed54e00a45be77ab8240e51ebc355b5fd04069aacd2e8fd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98bdffb5f4aa3b22b94d786953005e23

    SHA1

    33e4a785357bf549e19b550e31aaaca1affc70af

    SHA256

    0b47c20bf91e0c60147cd2e130cde9fc1c2d670f4438880bcbcdc9340913e294

    SHA512

    b74577bdd2eb93081417bb9e04788a0b6cddc0147c371438cf16059f17e52e63dbc799cb323de724bbb64a4910406622e7846af60bc596d57e276d53987c7a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71246d04e654d62e658135bc4005a9c9

    SHA1

    4a788ab30164ddaa2593c2c178dd5e86046fd59e

    SHA256

    327cdf5ff2acb491564752d420a44df8257baff6db3755600f5a09fc9bd439ec

    SHA512

    7d7ba6ca2f6c5f9b0d665dfe265a986830aacabe8e801c052ad17d0418e90ce4fc3ebcc7281acc97b4cec11d1d91d94ee6e804cc8df0cc631b6508be1c1efc3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51bae9a1249a29a60c6c2ddc7695c420

    SHA1

    d56de37401189a0abae82c8c1f0bc2c850dd0c19

    SHA256

    6d2bfd8d82d7fecfa13be1815f9302bc198438afa1623c408f9121a80de7230a

    SHA512

    156a05bd3723be4def4a91a4eaa7bda05662eef66619e82c0d07e373264ff0bd055d61a1a160ffcf68ec56e1c784ccd83ec806fe086062b28033b533dd7b49ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b08be30bcb851fb5f5b93383877781a

    SHA1

    e1e2ad6f88706fda7e2b5cdabbf7b0da55db1316

    SHA256

    dd9b5b2ac7f28f22c1a941bc56699ae905a1a5bdcc98f8b51b4ef1b0e5934c48

    SHA512

    ce7eaf6abb46a6d8e7ede6438f947940afc0c6a360641c2c561de3236a7ed52d5b433363fa8c13ee76ce664ffa7b55c7568736d60693adb882cf5a1c081a0b05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d3741e94a59941fbbdea573dc34ae69

    SHA1

    af2fa498b3217e9131c45a4f9fb9012f5b61166b

    SHA256

    a9b0d9641cc9b1af9cb951f3139c71809e7058e60f7e032f9f0f2ca14c42e655

    SHA512

    a25530f63f975a3569d1b5c2cf2ff93f081352dbbe42e90b50d11b23561f17ae0b60c920b373513d1a5aff0889fbe67b8a69cf1e71addebe7666fd029149844b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deb066d953d5585e175d80753207b85c

    SHA1

    449605a87c9b78bf236f6a06aa030eede22b54e7

    SHA256

    a5a68c5ed016246acfee7886975134fe8cc8b4814cf413e2e1f52aeb785b0f22

    SHA512

    67580b1bfb14220a0dcfd587b6d905a2fdd4d5f36950d50e4f48c71d7ea71d81419738b0c569e2f69512103b72aff77d7d808756b8c46e2e98023a8e417af149

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e4e8fe32ae747f21e0f08431286a8f7

    SHA1

    3d6e0fce46c73b5d800da07dc8f75f6032616f0f

    SHA256

    c04b5889d596af3bf4c4c99acc201ad279c2f40fba84658de7faf4aa7071519f

    SHA512

    748f595898c9e491405ca9ec1fb350fd3b5be72c2dffa9931681bf1ceffe61d2b38703dc9dec31af2af0dc10c868284ed21070c42dcbfa60c1f9f84c21af35ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71f5e008990f83a1ccca0e902c0a0995

    SHA1

    a7c3a3ba2ef05c6e58f425d82424beedf8d509da

    SHA256

    fe818066b60e0d1d43a98c8e27838916285475c3fba02c76662511f67e1b09c9

    SHA512

    11f354128a4fbb6970b9c6ca8cc4e0107115266a6eb3cb2a363992547bc3496399eb79dffd277b84b39871e8f19e7c90a4c0b5931627d2f76fb0b16174eb6e19

  • C:\Users\Admin\AppData\Local\Temp\CabA373.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA412.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b