Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 23:05

General

  • Target

    153f112dcf2b658e9f49d857a048aae6_JaffaCakes118.html

  • Size

    32KB

  • MD5

    153f112dcf2b658e9f49d857a048aae6

  • SHA1

    8c98d10bc6f23841b85277853d16bfafe3fcf24a

  • SHA256

    1a4e2c550240e55b23ef80f60fd031d7ec7f50a882566b6b9093339b35ceb424

  • SHA512

    7fe5e06db8388a87b36f43a92a13545b71d389beba52d99d505b6f29b1d78d9fe451015bf0e2b65ab64ad06a03f31cba68746d2b1199511b072de54e91bd04a3

  • SSDEEP

    768:LHTKlq7RXTKlqNwl/YIaflmdwkU2kESPtBRe+:LzWq5Wvl/YIaflmdw+ItDe+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\153f112dcf2b658e9f49d857a048aae6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:860 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    de1681004a507d093fdf62624d449022

    SHA1

    6e4074c3071e2adca4d2a55df0cf20fe0bf25bd7

    SHA256

    cadcacb8c05299c7666733100016b7da3ab4341dd82e0ce339e9ac1f65bf4019

    SHA512

    c07798032e5b8a5fee9738b320ec9bc8ce41e03edc9322b3de700c5cf39b44c2f57aad1057a88350664bee6a92aad895b2a5e6e7df3b751a3e7b6f29b7761f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cafcffbeaf135c9703ce5df6d029d042

    SHA1

    ba5b22b5748321a9ff5c0895204508b142583b15

    SHA256

    26fc7a482dbd0d60477dc79a44443bea37236c473c51041de4e846f1f375061e

    SHA512

    73a7e62312d195d8b60746de8bbf4e5854173aff330939377de8591a22cea330f960bbd91320b6174b5a752715f68a89d5f48c59ede6f47297514f575bbd4d91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b474618e9b4ed39aaf5803d41ce4f000

    SHA1

    83c878a532b71adea1fd68543f270fecf0732647

    SHA256

    e3584d626446cd6099ad81a7405fbaa08387387ca2298e6da563d6face0cfd0f

    SHA512

    2cc38b69612ffdda7df832e9801b89a03b39715a98c818492fef4eb42f275590cfb1ca0075a3fb2ff4fe605af8ca3b2906864c1a96fc0edee90c619a3526dbef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fb63c9ebf8cd1013de24ddb8b8d45d7

    SHA1

    d159ec42e4f1331329cb602b418b7fd616d65ae5

    SHA256

    9099d61c3c9e73fe5b877c8656d94adf93ddbf74ffad0b8ff6bcc0a6ccd4b030

    SHA512

    df44ba3e1d3539a3e8bf19e7857b6eaeed1a3a94aad33ea9e80e7595237f48bce78a1557c37a302d079b55d126eb824d28efa148d15b96832d793598a8a64ef9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6af7dbddf36d150dec7adb019d62ccb

    SHA1

    9a6b4e6c6e36d313c68a6800904d52123e23e03d

    SHA256

    927a4ac5c8ae24faa195f00c00870e0e9d6f53d27114fa6201eaada7de0b9417

    SHA512

    c9fcaef15f52c172a762c987cdfbab32c12399990cd050cb75917ce723e47c50f5e645770d3db72d5811ea684791177a57b05f2066419fb1e43037fee23e6201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    744d00372b138a3cf16a81f97409782f

    SHA1

    9f9465cdb860add75f84e2e9a025a3e77ade03cb

    SHA256

    81c96727054f9840c52880e72991c1c39546a5beb46e9281ca5fdd6dc2c26cb1

    SHA512

    2a1ea031f1c016ba199ea09f303f05518e14aa7d63d7f2b422a4ed3927ed4ce6a390b3bdebbb32eba1d88d56d24abea2c7b7044c847f44816d55b7f5a013dcff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f5ea09ee06dc3ea13a615d83dfa40f

    SHA1

    7b09011367a953faf5e3137771b946093f67e9f2

    SHA256

    2dbb3de761b82bf2b9f76c68a9d492f84b569fd24879e883f3861275eb25e55a

    SHA512

    b3784baa5b62e998aec09837592aed44cff1b1cb8447c06cde2a61598c4eb61f71180d8799c2937bb4973c85c559643c3210ec47c4960c0411d69e64b13235ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8d96f8df6b344cfc5d003b3a2049dc9

    SHA1

    ee1889b03acf3dc2bcdd5f1c0a051b4b5e26b8fe

    SHA256

    8363f6707135b250b41bb7d89c7068430d9d47ce61c10ec697ffbc2a7ef925e3

    SHA512

    496750b6da95a1f76ab70bda2b1bfa428547d8efb403c7b7de3e5f778384b98e74dd7d59cdea8fdb2944d3acab23b7ecf3f2cfb273b89fc8571998caf808f0a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7f67c1dbfd426b074429baf0640e850

    SHA1

    34002304acc95963bf7e9e79f3f894ce10270d99

    SHA256

    f236647a506a1f1f237c998ce844c56bd6c006942f7d7ccee50c6ad8f8ff57f1

    SHA512

    c0a9bd38fa1d3169f8a4edb9d12eaa9f09795a872b2e15fb790405a03ad80e8e9c351e072f94d713826828c66dd44efbe530f9ef961cf4f702f6932f3e465482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9573671f0665c7913d4c53aab2e1fee8

    SHA1

    d14dd3e46d2fa364671740253adb7cd22575ffbc

    SHA256

    19e18aac43ea0f3f49a0bdb7d460d1cc07746d2c6a154ffd141632edc76a39a0

    SHA512

    e8137b34b6e22b7a0f308146c195ea5049fa11f566ca4038a344ae058456483bcf76c820a7117936d6345eb6838b44b918384755fec801cb5714e353a7a81c48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56d0fe1731a2c36ee9e933964f12cfe8

    SHA1

    a54342b540003b983906f3d4f8c2c19ff8ab598c

    SHA256

    5601cd46c810de08238f94a3ded848cd9492ce16477b0ee377052d56151b445a

    SHA512

    0c2ff89f8f4a62a35fbe667017615be74a1a3f8489319b3f661fdc3fdfcc586b1f15ad6f19125d65e3f88f8155ceba57c071a8e1afc6df0f0bdda2ee4d9a4ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cd6b431c5b4ffe009ead326472ac375

    SHA1

    36bf695139f7822453cc0b4c83c477b220b5f6b9

    SHA256

    19f08b839b53e2d4776ad720b63705ddcd4bc697167defab922ab06c6c6ebc75

    SHA512

    43df2f356c429a1f4d6ef145f5b0176e5a37c42821c74003b75b89179569cc4fe86b16c015901eb250b8ba5ae401141a43c7a2a4cb8039a0eb9c8f988fb64d53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af0076fba258aecd24e0c2c04b332288

    SHA1

    e7975a3f5ae8dc172d816bb03033e2c0d17f2a15

    SHA256

    fe2c27d3a5091fd76b537e5cd3cecd68e9b2a2be608bf431bdfb261f9311028b

    SHA512

    a68a83feda3966c497e126499e1c600425bded14a73794ffbc017295949c2c05da305fdc31134f4d4fb3f5a19be08d5b4a3f2912485b5c4122be5335fd230197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd6b73b4cba3c4945001a77005b56823

    SHA1

    2da145322ee314fbc7a56f98772ee3e5b708a6ce

    SHA256

    19d987202c2a06ec631176af69ed85ffe33aa6b8e5425a962d05c6122131822b

    SHA512

    189c41ef78f4293dd620f411257da7bb5efb6ec624ca8cb7d6d4dcc09a6b92b628de3c3288706ad40586f2a19bde622222211c759a7a333a6186b1f7a71d6d8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9e2eeda427c43a74db44cfaf391a451

    SHA1

    8585f85f61c3dc72749e7a5ed80e4d7ac636630a

    SHA256

    022c37135016ab81ec6282ff20025434ec530d10d24a96319f5380a126ae159c

    SHA512

    be722df9d97129ab8233b7007118d2770c96fe50fc88c3a02a3ebd21b71aecba644380c3ae1fb6d39fdd97105b86bcb201748e6a72e880cb262e8eb44632f685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f34d970806691458f02ed7cfef0c4f7

    SHA1

    8bd7ae21f1fc133e08bc0984d06dfd38967d460b

    SHA256

    e2f56fab8b4cf30c9bcb8c80f4e998a9b80a80db5fe4819196357277f257d025

    SHA512

    b6ac1a114a2dd9231efaa2fee5d05e26e3937c9c93c0cacffca41ef37b18bb5de2146496a2de26a7188fc092e7ada5f273a30496c8b3b10491b152c69f910929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a10a13f4027b747cf4de61a1feeb990

    SHA1

    1edf63f253537aee5712da459f0f3ecab5f786b9

    SHA256

    0156ce9c3b218653583d222719121ba6340aa8fe3776d27995b8b28f2381097d

    SHA512

    e8dacd683fa386b63d9c30fe46c3c3867f668e50794b24790dc962de32ef51f9a2d3da7c4f0a66ee342a880fcf978bf4df6ebd0160082595595c916e98c6b1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55dced8e35d9057763b8ce6e3fdf951b

    SHA1

    a5338f4d0cf9195e7481273682247e693721655c

    SHA256

    0c57d842b23191679645af9c7c15a67c11cfcf214edb1d1abd95a738160d7c91

    SHA512

    604c62e7eb20d1a045a55e14addf768450d609f7c98edb774052b2634e489b0b66b4ba452f75951c80162b730dec5c9a5690d73c17ca47023039f29b8111220b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2039aee29abb6c3528cb633ae9662dd

    SHA1

    70993fe135139a0656733ae9694b307b91e2238b

    SHA256

    6bf86a344ec7209eb69dc5461837e1d12f35ab939e1a7fa4075ef6fee48421da

    SHA512

    adde648d66857aec80a42ae586af587783c76e0c701bfe7f835f17874abff6b27913603561e3871feff5dc4f987966580580d85ffccf4c330ef7fe83d3e4e622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea99c5477f14f1e51d53092ff74feb72

    SHA1

    cc6e6885316f1f0ad4721cf038f39432945d17d7

    SHA256

    8a9388881c8aeb84b77b395350d6635b786f3a90b69472fdb7e16aa56b207ab1

    SHA512

    be59679da4ae71edae5c0a0b8a07c1ffa39b665ec5eda6beed235fe789797f423b2f706173bf063cdd4004bd909280f662a98cef4d6e9f5cd2070716fa3e0776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    546e4901f2b5267499d5de435501e8ee

    SHA1

    0d60051dabcc4b67897edbffff19d3f1dca99c97

    SHA256

    c6db7fd81d1bef1a9ef9771a65446cd82c3e7ec1ff2ae2af14ba6a108631606e

    SHA512

    af81d4d7445522b0f5ff689ee8cd070ab9a9fb8ac5bac4f55c58e6fbdb6ec4c2bfbd3f1dd30a0a07971ef6dc269c7b2042caf320edd1c6f930a3ddeb3176c159

  • C:\Users\Admin\AppData\Local\Temp\CabC988.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC98A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b