Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 15:10

General

  • Target

    13dbc0948dc87e04b5c88828212ad865_JaffaCakes118.html

  • Size

    9KB

  • MD5

    13dbc0948dc87e04b5c88828212ad865

  • SHA1

    339c0a3471e47066065f16d84676bfceb328b393

  • SHA256

    f18670777faadea3eaf0fe9674c4f34d57ce78098a804e757642bebc2913b2e6

  • SHA512

    6657ce8616207a821aa028d00d324b19fec5f8f579001f830583730290a9f3a1c585d3890ed394e17ae36ab95b3bd3ef6bef20e0a1ae484095ee9e34b0b43958

  • SSDEEP

    192:YOYjaQ0EAAVz/5XP7GJ3hECK16hIY/xpbqpYPYtTgqNCsI:YwlAS/KgPYCsI

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13dbc0948dc87e04b5c88828212ad865_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2504 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    98fe735c171e5565b8c7ca852acab387

    SHA1

    392b6d45c6eb3f3b3fb61f89022f00d5acf321ac

    SHA256

    3c0958a31974a70a5440ad9b766c75deedf11b71439368ab03c93fb677d54b30

    SHA512

    6b175fd3f57e6feacbc0275fa7bebdc6232dd5733bf86c951f352f36f491535e60dea0ac8061f25bc44a2712fd43a3b21678dc7ff04ca06a36ea8e84d1fc0113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58cb250bc1809dc61c36cb8d4cd229c3

    SHA1

    0e1aaebda5f39545abb5c931818f20170925eb09

    SHA256

    74afe1df43ce745dae5987253c162a71c63e819aad76866a24a58f42ca9eba5b

    SHA512

    85f493ee1d8d076c425e2a24f33ad8c72a4563a7e94e2245c045a4dbe88f0eab1f1f887ac4428e0649c70f83d783834fd98162496c38bfbba00a8d1f0560b4bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2507294bdfb1baac9c0ef883b8b0f6c

    SHA1

    2d0a63c1236b88c793d01400b9ea60d81aea81b5

    SHA256

    106ecd7e2229e63523d37ba74152c4becc5b0cd8f03f24ca25d6d67102fbf653

    SHA512

    383d7efbf9acae2b016a27173d0f268d336261fe2593600ec66005a381b16c6e27bbf06fb8cee8e6857beb86e3caba8002cdd525a20be78f2c737b9e1485e72e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    922d3c07889557f56cd9117c79ccb15b

    SHA1

    c85c8b8e2acaa1a1334ac081f06d686702e8b820

    SHA256

    fce30ace8ea2e084d1e11a70a8ca9bd4ef1ae1668077442eec9a6d6affefcf0b

    SHA512

    9a4cec39392362a53ce77d0b5a26d4891e834030e10b922181e1a96c073364a82d68b9520eefc170b7130735eaffea062d041c1badfc5a400a96c3c7f8a57524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdf07a576450f8a32a89f2a97ca61844

    SHA1

    186342e05d0d30a451f90166e15976fefb038895

    SHA256

    723e45e92361045d031365b5c7d9b3a3cd419e6d3a5458fadba0fcf4c1d7e8bd

    SHA512

    31df87b7958fa94f1ae1987f9436cf1f7f8b551e7a167c0fe0fb94bd8c2688643daad0fed0adecbe446477964f2e0f2d4c4ed672312c21c67fde40ef5b7f2a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51a0fa5828529b0d3243149c3069278b

    SHA1

    832ebeffb45fd52cd4b3a3011177da58308f1e65

    SHA256

    6b072b834bf9fe3e42520c36b629fdd21c1b0eb9b02479a2b4c44c2182f9bb7d

    SHA512

    def387b0162678a516af1b7a7dadc379557a0ab86f4c06387b1de9c9165873945387c920d36f513e44634ee71a7b0d90ef0e46f3d482da2be235b9f38c94ee93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab687a6a299d8e7481d86bafc6ad91b5

    SHA1

    c567c879ebd095c03ccf8a3d1c128274d7a2155a

    SHA256

    07eeb9aee11356176a78ba349451973a7e9b7666b771c7f6e3b4e859d228580a

    SHA512

    577ec9370fc6aa889b0ec2c0bf81bbe31dad6c87c223fa2da09121a199778198b4b2222f25e5dcfa9ba87b9df04c4b6746d7848a65af72d0178cce93beaa5307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    659fda54c4fe1650349b88c9727d480a

    SHA1

    748aeb69b523c8a7df6ed725f2786a9ae2d6b102

    SHA256

    1f47b1f8da1845bcc0408c8cda80068feb978fe72234300b49963afda33ee2f4

    SHA512

    d844986373db1040b55d4ce9d519840ae2d2660e99568532138fa266fe5438cb73f62f6005f135c36cb7bed486a08aa23fedcecfcc33c58e19cd0d8311147acb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63d734957a11f5c0421e665dbb97db58

    SHA1

    e91b077a21234fc848b3d3757ac4f458538c2e84

    SHA256

    78fb6baa9c577bed4bae94a8a89a6c80d1cac19693435c40a7fe4d27ebf4451d

    SHA512

    88abb4f44bfc5d2f07fe21fdfa291e215513f71fac7ccbdc79a68c3f68c394de9981db6411b3235cc4ca37e82eed75d7a0498faaefb88543cd713eb517c6ec4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e1fa00262621693ab129197a5b0ce76

    SHA1

    232dfc6968319a1f56af24ef5d9316843f2da4f1

    SHA256

    7d1991ecb7babdd7aa6009fa9c0b0668fd5f05e4b297e5cbd1eb68b0aa522b93

    SHA512

    9121b5a53f30f03f284a8415b8d2f74c175661a698c60eec57506caaee4355f42ddcbc9f85fb4363893e0614e89d27333540d284fffe4ceac501f2fa0b960d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17863391ad83c64f1f05e783f700f7ca

    SHA1

    33ab1b872c2119695b1847090f86d2ddb0ad2587

    SHA256

    1ddb2fc35b6571b052f30ea92f19cf93d45ad0cea108006ab36687ec93035ea4

    SHA512

    a83d7f5b95ce8d6fa63b8910d9336ffe5d52d4fb891945371b773829e8c09b653a8f3dd45fd16642eee9ae53bc1beb9dff6e3dc2cc2f972096bee17c78b2142a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    979e380538e9ca0af00afec740c91ab0

    SHA1

    0611cded417cf3ea13f6ef34756b322fec6fe5fe

    SHA256

    c538a018a67a86f10e205b3ac9d270b7a379bb1e23f6f126424ff3a239184295

    SHA512

    3e107e1286eb6d5761f993c29f20430586e3c4eb7d35ef80e57e684c5ce2bb6f8d2aa3e48d828959cd2d49189f1f4a24b6cd59d33ac04e0d51cefc03325d5f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52d29ac268b9af97f9b3e1394f1dd4d2

    SHA1

    6971d5b24fc7477da76c933398976b6c73a92868

    SHA256

    fb06408a15fa558dc94db82d57d4ad2a2808284f04e91dcf6afe90e3c3e02290

    SHA512

    5ed0fa407e03679d990e0648931575d8bb95c01ac87440dd093b5b954166f7a0744697b2d97e8cd3fabd94d419b564ac3cfd51b49dc6308bca82a5d0b64ddefa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca5e89862b2b754d9c79c6292d2d92ee

    SHA1

    94199b5c7541c6b7e2945f11e72a5a894198a123

    SHA256

    c60b8f3964bf9e3f47b7e9e33276b0bda95f0a80c9bfa255f666f3b94c3fc5c3

    SHA512

    9c3f3e0dac935c3fc0bdc25ca6d7901ac8056022a6c3a4923919841c911149d6fb3da950e9eb38b15bca13bd669c9fdce62ad622988e86280220961e95c38c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5932b5c7f3c278299f042a8e7e5f997d

    SHA1

    d0287e570b151485442badd15cc3c244cef64e5f

    SHA256

    b8460b6b24d47316df5ef448afe2b310caf128aff12f2f82dea4445ed42cc874

    SHA512

    78753786a2a797112aaa87b5b1c3e9a41cf6b06ea11f1f7dddd3596b97b1b29836ee5577da3a76278817bdf8aafcb9fb82869f8300aa741482aeb51db5633bf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ecd6ce2e2bf7fac5be3ce76bf2abcc2

    SHA1

    f66e739f521836fa422c8beb1e891cddb7b3854b

    SHA256

    64941ca757f381e9273ab2ede95b0af951a13d896fe31a6e7b9271239e4135b8

    SHA512

    f5cd2cd27c12fa2258ddf6d27e1137092d68fac25ce34a0b09903efe4afad0146ff2923f9f74eecd53303f5a91893903a7324119f3c8da1dade588fd0b68a214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    166d53f9ebefbf1b8210ff55508cf04f

    SHA1

    8beb7444d2567c9f0e04f66442f0e0ae0174deda

    SHA256

    b19667e59b8af323b5cffea853dd05d31c78ca20646105f90858c070a03d5304

    SHA512

    513cc5c82c625fe79d11a9a9c5524d327fe855ea793fb7324456577cebb20ca595b2a4878569d678e5588aa11e0531645cfad66447447a82c5bbc0a5756ccddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de2660fe54b177509116a76b8125be79

    SHA1

    c16e14d59e7024306158b2ae0f29aa2d93116aa8

    SHA256

    5cff3ea336e1a8e650295acfa0544add32ee52f5ffe0b2fc32a26803c5a779e7

    SHA512

    dac4a49a61f756f754cc2ef0e21d123a62a8a7f240a5c33274c4408e9fa0424cfef90e99be046384fc82ec93d32ef7fa5bc839e72f7f6e0a1c5efd7329e7ea83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a847c973397216cdc59f0a34e62b58ae

    SHA1

    490befd11b584e14ad480848ed06e7c8cdfdd051

    SHA256

    b49c596dc79402ef8b76bb3d5887774e8b3e14946bf180d2cbd983ac89310adf

    SHA512

    63208feb409792b413457a729dcfff17d7d84c3703b814147bb05d6e7d57ca7fcb591cfd5b2960cbf809eda6af6d265290b42f016ef49ea2aa7c64ac01a5b052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aad138b5e1a96de89667bba7271ef205

    SHA1

    6da5b2c7eab0f84a821ad5c935a7cd6fb5812a9c

    SHA256

    75e43cf62e03cf2f12465baf154f550dca976df3c3bd4ce91b3c04a87185c476

    SHA512

    31ccf7079430935abdf1f7fb82aa71e46d164d6b708f4ca31c47608afaf4766382e992d54db3131dfaf75836de3b5ddd463cdfce7f0409bdecf42fd186bbfd81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6db7491e1053d03736bbfc185d1838f0

    SHA1

    9bd607ca50e74523363313fd49d4d9a02469292c

    SHA256

    1f0cdf6301f408a79cc91f410689340d068867174ac5204fcc62219aca8ef3e2

    SHA512

    5b246b8f4f0b7c7f9622626afa7862ac9aa7d923a2a01bb04ee6e1c45a1277927196b786258b39198acb6066175e726edb50ce3e037433ee815ba077ac089eb4

  • C:\Users\Admin\AppData\Local\Temp\CabA650.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA651.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b