Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2024, 11:47

General

  • Target

    17f483792bdd6d838f8b1740ae5bef8a_JaffaCakes118.html

  • Size

    16KB

  • MD5

    17f483792bdd6d838f8b1740ae5bef8a

  • SHA1

    dbc37176b3f61dc194a07dda4d0aed1e4c1d69f9

  • SHA256

    1c27193016c871e663851b6cc21c4b69b395ff074c4c45cb7e6750aa769b8603

  • SHA512

    c16b418f339fbb6f49f6633fd584a971ac574433693bce6903ca41ff6131f4193842dff0d9e7ef253d8e57e19a5f10d7a4fae8e975ead78bcbc073205edf7388

  • SSDEEP

    384:SIjKZBOjkKylYnYNBFHavNKyN6gAgPrePEotHyuLnuxI:SOEq8sNKrgz9oxdnL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17f483792bdd6d838f8b1740ae5bef8a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b19e717f4be2be7a157e41a4f97f6a0

    SHA1

    b6926cd5eecdcb5cc06512d6bfb51a3e3e26a033

    SHA256

    d9b31a8797a11e010a55e116e07df9016aae60a332e44494404e3fca2473d853

    SHA512

    6470289132a8b2e194827ef44bbefda6a8a4c4333372443fa27a7870c8dff57b5eaab256ae57b771c70442f19182a94aff16511a8b07997101e4075fbb079c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e66a22eb09674a38df4d181ca4956b1

    SHA1

    485d17b5ae064cef3c817fccf9a4e6126a697e43

    SHA256

    b283ab12e326aad3df11554d66b1753c7274a1eb50917ad6449bbf8aedbb5d51

    SHA512

    dc50e533bdd427cf69451f1a09a76fddd3fabed00812271a4d9684fe8aff48e67d94aa0ea2b525d6a2e7034bc2a4d28f279c9a233c2e1292c28cbabdf51baa0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64c12499af0fdef1d04e082277218c85

    SHA1

    a1b27a2238a7779004cfab29a256ccdd915f4eb3

    SHA256

    67e01d5412e2f5ea03932265e8886df5d96713d34852d4cfa6d476dcb81e6a66

    SHA512

    2898de6181f77723649bd7b2feac52acac6d14127d774887b2dac8f2a8e1c3dfce3c4bd2e8d3c45157f1d82d008b3c29800055f094f678431901461734ed4523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdfe79d4e486ba9bb00fe61a0e4ca79c

    SHA1

    40ba6bb95e233cbafec70f267702e76298ac723b

    SHA256

    52c2f9d85d4803ab3035bd335ccad38309f1116f75c1f09e89cfbaa4fb8385f7

    SHA512

    a6770ee0b7011245e1e35e09d9166b81f32ba1d392e24be6cc5f06e3d3549c6b53524707cd3095e09674bcfce04af528a2c32d8428e3590645abb067723e826f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c4dc89719e34095ca4a401eee9fceec

    SHA1

    2695eb087fc35e6727c92190cf7ecf6357f618c5

    SHA256

    93f808af649d400c8662420bd30abcafa91e1e353251cb8a7172e028d9f5f98b

    SHA512

    867222e6901dee813b521b8ef5fd8b5ccd0a110a40676b1d0915d961151da00ae4338faf331b2494edfbe695b01980f33e2beb5d2bd1e9d1fcba438310af5154

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    347c47ab1803588a86022b733dc7c331

    SHA1

    6dfc918fc4fc89e0fd66301b07af1a8b8f1098b9

    SHA256

    1697a30e35af4cfc2c49ea1ddf5ade074c6ae492833ebdfac90cba9d6667c749

    SHA512

    c1b68f4c4b403a2456c5a187de5f4576e0c794f974e95d34d237e6e368218335d8e2d1ccb854db7acfc8acb53a5b2f4ceee148030df97a892eaabf138b1c6a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dad31eceb6fbe846e06a321b5baee43

    SHA1

    f495de01390b98fbd4d5a642ce4fb18991c41b65

    SHA256

    25ffde35e56766025d92b90a01258df490bf69e6faff81db61f92d8fe86ab249

    SHA512

    13e60fd449d925bace69957bf167f262bb8dc117b988a4ad653ee07576286d8d6fe70b06e54eb3cc7fcc1a36a154034058925e3fa205389e4ddf255808c3588b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d26f0c3943eb793ef8708a80ad578a59

    SHA1

    61989785a34d503a7d7f4d1508e9b25c31a67e0c

    SHA256

    c690ffab53866e701d0de05a9c6946a04f0258d42663882ae6710b6e948b37f6

    SHA512

    506feadcd64a35527312e1242219a03ee29795e9b3d092ae79b84ccfaf43502a9f63db9bacaf9ea00403ba59f6a57e4a8c5810ae276499a43cdbd34ade778c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b9a9b00a1afec3b79be5dbb19da5d18

    SHA1

    abdccbabab8320d83689479805833ee6506e9902

    SHA256

    a70832fad7e6cd38a7c8c10c46753c35511c47f8b7269d92f084cfb82ddfcc06

    SHA512

    4ff4f56ede17f88173727e7cfa3854b8b42f3cee93d657f206c630e2a14ca4ffd643cd02101b3b61e716fd87485c44202460f0b3468d2acff83561d4223a0f07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4aa2ffec5b94c70c516dfb929714c06

    SHA1

    eda638990a60245baee570c3448b019c1cf13597

    SHA256

    27e6418ffdfff9ccaad75d315643066d9a556f86f990da140697c8a28e33b582

    SHA512

    61f2ccf1a292eea329b86c52e01e1d83f568cb6565238985c02fdf60b054e436c618ecedea3478369eb8ae1d5b561b8a01335db24a6efbd9da27fbed36a02ea4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52277ff5bc5c646a7bb4c4a7d880e354

    SHA1

    ed904e180fd020fb24c34653bc7d8e5cfd85744f

    SHA256

    5444ff7260f200f6dd2ee876cf4418819337bc5e206ce7c3ac4e183959ca996d

    SHA512

    0102003bcf273cdc814d6161f449017396842a24d3c9ef452de80da1eedbf5698b4e277ba9ca67b95a978d4a8f85f7e3af3257e60581e73859543552e3b650b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18dd9e7334a75501ce10604302f2bc1f

    SHA1

    ed046c2f35fcdb4eda81f3d077b070ee62bcd5bf

    SHA256

    f68cd10c416241420cd463c8acc0712172b96606fd9eed95993458af59d88044

    SHA512

    07efbfd733b93193bcc5bd7eff7f03ca4b62814a8ba462c1851947243682de6864e0d1de16a444aa08153ec45d9c7d7861e3a3f70e1655efa313e98c471c2cf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79060f3a295ff2236075ed021be32577

    SHA1

    80f53b2802165691c1fbd93c39cd9a3c4e3dfbba

    SHA256

    c1e31730944606b956dcc0058a81ab2cf39b636c2cd9817b651d982f740f9656

    SHA512

    b1498d3e6cc3f4fbfc08576d0c021b1d7eb3ae28d61e6b0dc79376214f561262a5fe7a5d9b0b26354d4a171ea1158c2f512e23273c94a21db86d05f38ec78681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cc42ad6679bc252db4bb434290cfba8

    SHA1

    7466b6d2923952d9c29a7244c63b9f1160cd6541

    SHA256

    7f0c5040e861b6f1a9e91201199e55eb9520ec776fd311cc59daeab5927c2929

    SHA512

    f70584fb79bedc50a8a3c32f81de527ce7e9ef12c82be725aa454d192f9e0f23745b0d12cdea6d7834e3ded400551826e3fd368a243a958fac8a4a012024d144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a934bfa4ccb56ab1d234fc7b3f007de

    SHA1

    2dccde8cdb9169e85cb1a826477bd81a8a1fd27d

    SHA256

    d3e256da219abbabb9f3403e8827c7b2132cb8f6a4021cf01387f0e434c3ff9e

    SHA512

    e9fa8caa86f24754af42876b840c3481586bd07c4d55b64688bc445c056415862078ad6753092b8201a0b181be25a085e6f0a2b2b3e45ba68895411aae1638bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    948f732f201d813e40cd08282605bf9d

    SHA1

    b082ab54510e1cad9d0d19f640d473d0de88f329

    SHA256

    ae9d5429845fe77f68e306ac449c490eecb716f1bef608901938538011889ead

    SHA512

    5ce20aafaa2cfde984a2fc208149db0e0d9929a4e2a692899ddfffeb562cc51a5aa476cc0909f86bda50289c7445006ffa07bb149749608cc9407cd02933a633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    111cb5e7bf5d4b437b5fe1b33bdde06b

    SHA1

    cedea88d20a3ab4558d1db330b66d047f54b32a7

    SHA256

    ab38cbd0073411853d10727970c4f91870d136f651eef069a6a0531828e956e8

    SHA512

    3c385ea745189d3d962342492d7aec16b4d86b1909042003fa6521d8174e35d9d20f62db3d8f8ff156f98d3f257e800ee6676be9d93f82671c0b14f83f1b50cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19c5020720a94ad2705eb7e409975b2d

    SHA1

    e727f8cecfdcb9a55414766dd8c0822457d6d5e5

    SHA256

    1159fd08e4583191b76d2b87018a7879918d6ae1418035ae92267784977ae550

    SHA512

    b9a664024f5c29604abdad29111e304b303c7e327cce211c8a9f0c481e4e767407f2a80a99f1b517b61f4950f85cd3a562be7ff7281647cb96053351884f59f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99a9108a8f8aee6d2736392a405c41aa

    SHA1

    cdad22bc06a92a7985a6f3ff9d3a2a8e86cbcefb

    SHA256

    a103a7902aee827081f02027964c4cf91b190579f1beb1215561d9ad5d1bb857

    SHA512

    3bd4569548187127e42b5b1c3021e41c308c9a85e2a06c2077ffd064e60c792c09a3ff6e16be02333d1906bfa5c803e3be3274de87f66f106c2eca8fb375de3f

  • C:\Users\Admin\AppData\Local\Temp\Cab7521.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar75B3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b