Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 14:12

General

  • Target

    13adb31363c5404311107601bfea01fa_JaffaCakes118.html

  • Size

    57KB

  • MD5

    13adb31363c5404311107601bfea01fa

  • SHA1

    2474d9c8e1a27cf163013b8f347468d27a504978

  • SHA256

    aaff395066c0fb62d80910c22bad00c8d0faba519432ef3875318f1abde99bce

  • SHA512

    53db4676f4bdf30d15d3b97f47d5344b41e53222b56dae6675ad57818c8f1a2185a0410eb5525bdb309384cbec1c5b691ba9788a2655210da754dd7764ca591e

  • SSDEEP

    1536:gQZBCCOdT0IxC4w2pf8f2fyf6fyfhLf7fafCf2fJfTf1f1fdfWfcfFf1fgfsfDfo:gk2l0Ixzk+KCqdDCqeh7d9FO0ttYE7cl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13adb31363c5404311107601bfea01fa_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ae697de77ada9c4808c75c427a30f2d3

    SHA1

    3ac37363b8d239ae2519a09583a0bbebf42a150e

    SHA256

    266c7b300b2f1a86b45493575a0b12ca0cdc4230d0c060ed229f53f1a55b78eb

    SHA512

    7201289cb47eaac29db01d21cf90b313597e657b39e690668389e31f8970bbe851f6e51a404d39deebe8831fb9efa00b125a8cba331eaac1e0b34a816640fc83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c339ff7fb8788c66b2ba4e21f4c17122

    SHA1

    2dcdc6e18632ba8555c145661d203e9ca848f1cd

    SHA256

    929b250b8c9032916e83e55fdda1bde049b8fcc44ff7ffdb291a8199218eb6d5

    SHA512

    9f87c074738c78489ad5a0be2616349b5203831f8731bc8b574db51f3359f8242ae3b532ebb720d21ca8b9fcb0e717a743c1e4ba6f897a31d8c19a1f69594248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f893fc7a33fb102e6bb4b75764b6ff

    SHA1

    9318a96974ebadcca7a4dc2b04609c33f32dfae6

    SHA256

    c368832d01d23a761e485baff6981807931572384ad5f44ce2f15446f5b652cb

    SHA512

    93ba024cca36a5a75a77b16af9057933444139a83c9ed47c1846908e78cdf4132b5d3332df12f00655963097c776caa3845449ed7ed3714527dd0f7fb1c0adb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4bc45982e719fce6e768b8c38787376

    SHA1

    06512db70b0b4b5c364524a0b4d8b4f0c13cde92

    SHA256

    d2a470dab6fae8e5811980fc3f26420de60e038e62070e10a8d39d487a786868

    SHA512

    41e24947e3ab2cc06fa6f47b4b0870ef1921f56119438faab45c3b1e8a4c6a0fbfaa16f16545dfef221a623a42912e3731400bd3e056ab3d468373db063b8396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fabc79c58c9e6f4f2c0dd5488059854

    SHA1

    6d618fa888d59e14cc10ef5b92d0752f4cabe8b1

    SHA256

    1da945eecb60f7acd41482e357e71ab689b899bf506db5d4a44dc6f98c69c154

    SHA512

    57ec3f2289bb8b40c1ad03647e4c08b0ccddba3376535841bdd58ff39eb7ef86ad1a58acf619709bc032305e25538a0d19ec6a53f5f137c0be1e0e62be5af27a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce4366bf7e75639b43eb5f5baa2c90ae

    SHA1

    d0b0481285b575abb6b9af664abdcc5d1ce3f0b5

    SHA256

    a0e372f59d8e6b5deb429075e054e22310c1b0b7c252bb96faa2719d54970a14

    SHA512

    019e1a58367a063c8b6d8bf54b6eb6af85c597f4b94ae949ffe70d2363722f29396392de4901a1af7201d7f8674bcb7cd55a505b03b9727f4592f363f811d0a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40803badc72b46bb4d42b66fc4183896

    SHA1

    6d1f083521e5d44fa90916df59f3befcbe867a9d

    SHA256

    fc1c96ca60cb190a4872fb12c493ace6e875ffd03f30e874b2147e70782b9187

    SHA512

    a1d4337cc7685f7c694773a32de18d062997e2f276b1feb6e19d96600e382729b1e62a588f681b819ce24dd48718a3f6f268dd084fef9df3d3cfe3b526068e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3140d416aa090285953e8b59c3bba298

    SHA1

    e9cc34ff24aaa408968f8c6a6fc350b25da805a2

    SHA256

    2ca6b4bd91ca5248e8ef5af9c37275b7ba17602ea31ed91cddc222f848ca7882

    SHA512

    c13d1038fd9dd43d7f5bd3c12493585c7f8e4f7a54a392463275edcbc6d0e3d50caba082294545ae581abba48e333361750b36f573c71da121c382b1e0e83884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2534c9f675b731378c6cfc6eac93f42

    SHA1

    9ae2d01b9e8f306ee9477146ddd77783b90e5bd6

    SHA256

    b37638f430125026c739df262170ecaef1cae60f17f3b7426a6fc9046d419115

    SHA512

    8f13604ed107c871e726b66a15578fa5dcd2e1c5c9f310568506c88e60cd621fd55c945e5076edc306ca36dd11be802cb0af61470cfa35aab351b8ef4487233e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d7a6152a67dba7fd9b99e40605c0927

    SHA1

    be7b6ec6402def429d80ef4f5fdab6d8eb283c7c

    SHA256

    494e3bde9e3232d7c320904fb4fa6770b819ee28b1d77fbc451e3db4bd624d7b

    SHA512

    874fb80d423f9410290ed1fea35ac573b81f897744d774584f376d51acd3c10e07c03e2268c8bed41eba0639ae5bd7605ce9af1e0ce3b588458bab676c4eebae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73500c7da0695d03f62e54c22c4935f1

    SHA1

    9baae8cad072e7b19b58758e73ddb66911777eb5

    SHA256

    c10511ec06748e1e1a9581400d800ba462233560bf7f7fd159fc84cfdee5d765

    SHA512

    835077a5169d8d82281f4237fa7635524cd8930930cea674437ccaf4225f3c58e210dd0710b3e633c9c3d79ac4f1569cd3296114f11617828553877d9c7e0105

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f83c0831ccf919ebad564efc7bd56e9c

    SHA1

    1812239a5a322a6262a5a773ac240e977a398d31

    SHA256

    6122816793b425b6e78d2ab11aa03a6aca622a9d75daf3a994c2834225c4376d

    SHA512

    3436b5c49b8e6b8447fc51058651775193eab930696951db5fcc4e3f472d2626eb00add69c844ad5d8ca1e7202e9cb408fb7a2d11a62d1456d838b148247be16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6e82820a8143c09f8683b7e82c3d1a2

    SHA1

    a13993b0ff14c1ea40ccd3cd9ec14401f0816d69

    SHA256

    15adf86b5e6e8cb1298c4774878c15e5c4a05edf154c0fc33560c16444d81a0e

    SHA512

    ac958918887491319bf70befd30896c59d583e60ad7e4bda258089643a5e4166c86b4587c72205b9bb92b1e221ee8d88618ac1f9ac586f65943f12733ec41dcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d49dd7e1a04c8984760b814287b8d652

    SHA1

    0bcebfbbfe9f49543787c17209551178c47b9d20

    SHA256

    ce1a63c4346a313d8323f3e339e25d3bc26a4bd8509fc21396ce982d5cc0b62c

    SHA512

    cce11b1e4c5b70d1f4975765d451e781790a9ff3c4b192cd26b82e5de518cd36a7ac8a95769502300a6c3799f392e5be7eec223b7600df640fb7c973724d829a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    309158631dce7c2a572a541803e5b8ef

    SHA1

    9d40bf96dc8a56d3fe5f1d5159cb06053870de83

    SHA256

    05dcb188e057d0c384eaa422a5953ee63f3c58c3071d2135df305fe4bd7bc127

    SHA512

    afe55f289ea3f0f5a5699aca97a67e5517c5e11b7a0087f199cd81f0a877e2ec13ec380e4d7416f8f6d2c279cb41c3e3cde1db570d187656efc6cc8d10c9c3f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8643413bb9f1ce675a87f3960e7afe9e

    SHA1

    f74d7c989ffc4fc3d759dacc3d2fe9ba22ea7173

    SHA256

    38f030aae536472ba421224604291a01a7847e71f37193e49d9a097ead985a61

    SHA512

    100b10a68ae7e6d71e4f1cd812118597edb9344cd253f496a454670c0ff4e61a128efdd71aec67cdcfe723dc74c3ca82fa2c0a3d7a4b69426a9d5a7a5508d44a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f525ca95a995ed913817c75679e2d2a0

    SHA1

    4ec0528688d9cb052bfc95439c1daff8af097868

    SHA256

    c728f838e8dad94e8ffebbedff8b3ffb33ab36a4653efa7b4287999086972086

    SHA512

    b9cb11f21d28aa60238f598c64262657bf4e42624aaa197ac43986e121e5219dcd2189831b2ae1e87e09cae8bbb4e6a3c8cc60ec5fb960d374853a81fbcf8505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26df72cd5274b44c66fd0581339fa258

    SHA1

    a124a5f44a5916ea26e778b270585a955cce49cb

    SHA256

    f8966bd631fe5d099c6f80bb77d333c1395705c2f2f9f8d801a24839a859242d

    SHA512

    3c5c6e5bd8d2bf3426398f02134bb311eb864237cffdd4d984da865ccc6f6cea4600f5ebc64a27356e06af97ac4898eac674d851bc9c7802621b0cb6b2f3b824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f934ff22f6b15818d46f07cf931b6dae

    SHA1

    808ab9c1ccc44a9a99713f030f6d006e8ac73638

    SHA256

    9185d04f95ea76366079ee91244736139d4af4ad4b126e513d167a5f5dae83b8

    SHA512

    b40b00fb96bcd204e82b5250a6c9f595ee2e25755ba0f4965ae49c6cf61c687681332006460aa1fe62cbedb68b1baa18d0aa24fa689636b650dfe54091081bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edd2e6559ce0a2efbe728e6f5ec7eaaf

    SHA1

    fc0146e2444171b50fcf3c6b058961cd96fd9155

    SHA256

    07b489bc8c8f427e0f7b39cabb2b9f3ac067e77c41250d538058ca14e0749d2f

    SHA512

    7334cd2def77c03ee87859fb390dae558e7f66ce92cfd6a9a9af58fd923d64116602994a2b497d25a14ee7f0d08570342ef733c6ce2a5bc4c14d044500b1fc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7a7748f86636bd1c14caa3beb7cc4028

    SHA1

    0fb62bafedeacf774c8648d262be732de2c6cff6

    SHA256

    d87c6bc07a956e62b046f7371ed5b29115fb0bd733581d1e33a9ba550bacc2f8

    SHA512

    cca7c21fbee29c36c0b6374f6b211b0529a350f16cf692e28cbe8081bf19c6b70f71535f74a483a24ca9f1dbd81c14b4d837617f502b71a93a07cbba7021fa06

  • C:\Users\Admin\AppData\Local\Temp\CabAD50.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAD63.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b