Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 23:19

General

  • Target

    26f2070417aeb45d17367ce39a40477e_JaffaCakes118.html

  • Size

    20KB

  • MD5

    26f2070417aeb45d17367ce39a40477e

  • SHA1

    09ce16a779ca690b2f414d929a10f4a2e08e469f

  • SHA256

    73d9836532f36eb061a85bf2202d7cfe619030c28553e47a33c89185b7640942

  • SHA512

    7dadf4e8923ba8bc0cede1e4e4017321f930de1fc4c5ae7c49f2f8b3fd375c6d274190969a3b96ffdf5bac55d36baef62451b2d30ce25714930bfae6473d239f

  • SSDEEP

    384:B5lIcQt64twGTHJp6XCITN6Z8Wo/gb8LOXguLZ:CX8Tg4ExLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26f2070417aeb45d17367ce39a40477e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff53fb68cd32e237f9231fb36d3d22f4

    SHA1

    d28809705536745cbb5f346f3db8f7c7f20e1155

    SHA256

    93274af20e59da73d198e78578e4fe8219364dc12a515e5b1ef78710893ba4c1

    SHA512

    9295aca795440e4f1b338a897686bca6a1b813360d7b89cec61094a0b555485c5c8d27606fd66de13981207b5899015a156f2902699d5b86bc81c61fd3ef9721

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5a1e86b405e3068b858042b02257e4c

    SHA1

    abbbf6e645ac723f459526cadbed43b299604e78

    SHA256

    bd6a300a2cbcea2acb1598c3e7e436930e0390c1f2219d766f5063711a9e71a4

    SHA512

    826d1001d7392949e44c5d5e69dc7c0e01d732ad8b11f7a408bb7241b30a8e64e45c17d6d7b071833513ee2cb5f7f5a4955a4bf761613ade09ee195965333193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e9899bb21f784f2d9c2f07fee6e200d

    SHA1

    23bfaa3ccc3d7be63f1649210f52e0bffb1b847e

    SHA256

    d8a12166fff160f054dcacba69c06a4bd263f5b1f265dd250da61e87aedd1e86

    SHA512

    f8eede76f4fb63fdc78ee918e462377743bee2e53f2e35262670ea2ef5fe42b95a30e368f13babcbf816c89715146a087d444ae9bead6496bc4967f84041e159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dab3a6d4334f5da85cb5a52a196c5bc

    SHA1

    6cb69e9b496573d3c980e669744bcc88534ffe74

    SHA256

    fe73ccf32a4aa25e09724943162a6d2b16a1fc98b70c2abe41078805e50400a3

    SHA512

    912f972abda960097c51d2be09850d0d2b98177d7b0b5a3f08262dc0312ac13de4c62d1bb03e45742904007f737a86c5f0cc507ee2d646c943c8fcd7d3213728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed34f53565816b1f6b9a306ccba1e46a

    SHA1

    0f00c43be958d06d95d729f050114718f405df7c

    SHA256

    9a27829187d2489e36b00528aa55f65fbf5d6d834789396596a9402d621f5751

    SHA512

    16c4f21161b70a51049311020e3bc2a89a5a3f8c42458807ab953120f3821974d746c410ffdd38075a8a46cd2bca77324f7c015721aa8d9c5c28f543a3f00416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ea18cd38c9c208246596fd65958d84c

    SHA1

    dcf9431abd21815d04a65944d811346cb8326da9

    SHA256

    9f6af5f13cb2cdf5c754cb730f896f5278ec347c2a8c815552a5e9d9cb73a4b6

    SHA512

    71e1ecb29f5f36f38b4fcb0b6c21ef10538f271e77046e169d8fd66373b0fc70855bb00c8fbdaa531be5815f27cefc3bab06ae2d26d79c0c4ef2949d614c3927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17ca1dd97fc690b22e245a90c48b36f

    SHA1

    31af0edc62b8920288535e47a2b43e11ac9637c5

    SHA256

    f9dee62ec6be6d8704cf064d2918bbfa779e8f6c7c56e3c581e3428de7c9f382

    SHA512

    39756a357260a9825af6ab557a84352029abc692ace100987eb2eaae83f76fca93b5eaf32ae94540747fa6faec2f83b08d8ab2e4b1ae1e40376ae7d4d22c62bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    677f01f31ae841d3360336d002098779

    SHA1

    195811de2b74a900f123524e814eb96b5c8f9e8e

    SHA256

    b3ce0fbd4be9b8a1f3e6cb29f69492ed48f9e8eb1cc67a5de283c52b5e9bf4d3

    SHA512

    9f1f048a14aaf0d3e54a747741dc56a733d52420e9a39b35f7f8d9e16ee8b72a8610a275dd4dab9a607abd0f03a1b127d5f97038db0758679b909e62ef3eb7bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f65354fa81ff88c5a65a8b9419499fd

    SHA1

    832e49beaa0c395388191369465c17ffea2d8406

    SHA256

    bf898db9e131d6e8b8ba9ea906d3f01f22399671c4ff1e9e4451841af89deaa7

    SHA512

    e9b6be2facfd62da9475ad5a072f237db3a42f0042d24ed8ebd26290205ac81bfeb0ab8fe917b39f0a7836b5b7408d789f280788c46eb6071dfe6926b51bf955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c206b08ca64f2a61a65f1d14992f597

    SHA1

    d678409804afcfae9810cfc8632a30104463f2b2

    SHA256

    c03809badf3790f0758c54b39cb1dccdc910979d0efe32452f9af1476f4e3a52

    SHA512

    a596455db2ebbd5e53cf0c6300be7dde3416fdb119c01417f9a86c3177928599969520d802c20ee3ae04d12c720e8a2074c77e52f34272acefc8346d0e823d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d70737e258205bfa4a8495465028e559

    SHA1

    ed42a1e5807f48948575ace850ba005d97f1adec

    SHA256

    be9b2b21adb7707fcfc09461575ab2657efd0e7c85117e367a0864fea09d4472

    SHA512

    a60206407652e5d03fbf684a69c3a98e1272f5025f644e812896e6effa930771e21b4fe78b7c0c40377d533b0c7e44246419b8b21a7fda449d1565dd7ca5e581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40bbc769c8610f442e191f33871c2e46

    SHA1

    6dca2622d8e93164680cf646063df7362a183d8f

    SHA256

    63909334107ad417993095586d72e3ade3cf2e8c2783ba3f59fe0c3638eec07e

    SHA512

    83f78c3567da95f8bda4ca4f9a8b4dfdb2b48bd142ac0992bf9453e52981e8ab4bbf624a4281828dd397e7ff4691f402ed435e152efe195b10840dca21e4554d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87a2d66c51ba1b026bed3a641a8eaf76

    SHA1

    bf07d16c9d848a7e29795dc11b09a232301647ba

    SHA256

    263e2ce4d35988be719eb6d475de80d51116153c08d5417c95350fb243a30aa7

    SHA512

    67cf99271ff033796028730142de0e8330de0c8db5b70fa78dc2572b4235bc81d1188d34b4d93965b397e73b6d060589a54eeb60a9276a0dff6588008d3e0eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a849ba5bbc750978cedf2a7ba457194f

    SHA1

    7a7e49132f0e1b69e083451c569683ba9dfdc946

    SHA256

    7523478c3c61c373e228e8f6f3e4020e9ddc5fc5d9bb6ae8bc2bbd2d397e0259

    SHA512

    ae1024564bb07702b8a61502182d50e6a0c8025131c61bdf6a99b107e97869ae76e1d6089f1c0bf880d2e7a2d4d38a6b021d4fede491fae884d8ff4b836eaad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    209238faa1437f6ace5366414691d7da

    SHA1

    d0a412731da6e0a10c8d25eb112981067ab73a3b

    SHA256

    b84a3f5276881fdbc6f6a78bc5499a614aa94cccec07630265e07008fde2336d

    SHA512

    92184531075c7a4c0b98cb8bc2a37d07b372c6db4d56ee7b8585663f0a0790ba966edeb6b435a665acb399dc4203d5e4533ed422f76a5c0a094d66e5fd52b445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    554967473db27b433a4b20783f2e67c8

    SHA1

    4e35e39b673c3f524561b1209429ca33c87fde48

    SHA256

    728098ba4badaee0abc28334a4ecaaae30fe1c46bf16bac90fca672754abe328

    SHA512

    00b92200c1cd1e8bae6a5bbdcacb2c56579e96c646438cf56b909db91ed50067045d286dea1d23a4aeb14bb964a9f6abda6d658e66812fc04dfabaa71e09d49e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e578f4207237dc7ffa5bd8088018118e

    SHA1

    b9a26efb6308fdc5b7893485d512582ab01b1a35

    SHA256

    5debb90c185367ecb36824ca7823919e06f44ba2adde2f18edcd8dcd3f893184

    SHA512

    da1f40e83aa66c47c04bddf8114dbb2baed6f8f6212de08074f42b96e753866d76195fd0c7e266633d5bf012e224f0c594c849fb736dc59d5bf959ae577ebeb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c33ab16db25588baf72ca573c484ad1

    SHA1

    a0f7ea4a7cbd7c13a525f0cb6eff354ac8efb2cb

    SHA256

    2d7205b1a8827933fa8dbef35e35513a0325a7a637116fa7f97a5e17f5fcebd9

    SHA512

    d08988e5e0b6ce141528db852981079ad21c1e8efc7acc78253feeaaf6e7b16191b4c32c13b441885680e09d5ab4f8ceadb25fc15d845fddc691293fce952f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7d6ab77ca72d3cbde9fa34d95818154

    SHA1

    5f51a9e806ceaf9cef6b06e11ea4ebf9b89f0f5d

    SHA256

    45b07cd5ef27f0f0088c9698a5ef85bbf789bd52cc2be9dc0fde902e08106dee

    SHA512

    a2b468a4ab8a79902d3ad7ac006c5252b4e5f88289e17f93a647d0ac508bcf546927c25fce4e2f24d07591c56d94983c97a1aa50936d61f9bcea93e33f7ebcd7

  • C:\Users\Admin\AppData\Local\Temp\Cab1F6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar285.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b