Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 20:31

General

  • Target

    250a87bcdbd3e0338575c83652009367_JaffaCakes118.html

  • Size

    6KB

  • MD5

    250a87bcdbd3e0338575c83652009367

  • SHA1

    c610510911cde46059618b8c942aee88c0b93a0e

  • SHA256

    6d09c929890749d96567b18872eff9be5807008e7fe29b354d9f06345d996f26

  • SHA512

    11788cff947bcefcb4bc37a0eaf8deea4a0b037c579e7a81b4b920c6245650c7add0da817aa86562de20d161f3d63f02fd833c9ccddf96334a1ab976bee7ce42

  • SSDEEP

    96:uzVs+ux74rXLLY1k9o84d12ef7CSTUs9/6/NcEZ7ru7f:csz74DAYS/j4Nb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\250a87bcdbd3e0338575c83652009367_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2364 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4cb371bd33aa7c7e150f11f2a5536f6

    SHA1

    0b1e0b04f489de3afb9fc06a425ad26290317fab

    SHA256

    19e3c81b94ce9f6907b3c6188f8a5fceb4fc83e0b5de50b6e516fb8c13883759

    SHA512

    461b426e7c8d7ec555906c1aff2407ac52bfb0fd1c72aa1443b913b304aa0cb90228fc6d79b6fdaa1d21ead1750b5e90ad4b616f349e4359a2e564ce0c57fbd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51b0014032036161581ebd26c4f41243

    SHA1

    14032af9ff85e918d459757b5b0e4402acb24ef7

    SHA256

    39eefb37c65a126936e1b354e67b84251165592b9fc993b4825601d26941dcc0

    SHA512

    43a2483b2082f60b5350221e2d4656faf091192bb3114a3bfd9bbd9c395382f1befc89182bb1de37ee7af2ff7248afe771137f143889f93dd9f50fd85f971418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    133f92791f49dcd0e3ed2b7f085d9c2b

    SHA1

    94005f4945cbc6be92a6cfbe7e37d7d8d9eb84b6

    SHA256

    34c7666a7ba6528fd95f5065457ab6e02e10e64bef6a86e7dd979a18411be4bb

    SHA512

    092f1ad7a98380d225a78fa94b7070d3a3519f6d74d7cea53d173c7f792f4238751f2e19d6f04bb37f6069720330046d3003427243cdf2eae1696fef00cced17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce919da8fd09049c0f29be2072cf40aa

    SHA1

    11853144925fcade64f394c31e116526991329dd

    SHA256

    ea43a0a1eadd5162c2a20099d8e204bb5f4874f3331ab164db14ce4269ec1afc

    SHA512

    2cdd2fd987e6d709e0fba9473305d0c61bace29c01c9c67bffcf93a8218ad8f2c901a66a9254ca40850f8667fa24753de3aa947a9ac591b86c314c422730a84d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    956f40b9d2c82826ad584323a3abd24e

    SHA1

    46e9d10ac3c68518d25f5484530b0ab438ddaa74

    SHA256

    7e721593d89ab5601e7a7ff0a092837e2a1631b2d8d282617a50e5592243a466

    SHA512

    096a88b42a174623c1ba3017a9dd8a0a181ccaeeea6fe6840a9e14cdda09e699a2790b8e6b498597553f79222694ee82a0b7c2f7145e2b73cc8be3a56781a348

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef30a513ddf187fa61702475c36435ee

    SHA1

    22aeb9521495cba9b3627a5a8f42bb23050d46dc

    SHA256

    fd93b0bb7dbf2ea4137bc21b64fed60aa3015e063bcaeb5cf647fb09eb5b3a46

    SHA512

    eba58d44b6f38be3fe27ca63b309357ad3e1d03ce73f456458ce0fa2a426283c6e19304ebfcdf7f2795263500644107c3c49512ebb6810df86b75917ff9b626c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb5c5cf21212b6098a4e015ebc374cac

    SHA1

    6059fca265806cbe461fd415806406720f396acd

    SHA256

    9e1ad8f21ce5b48bf2fe016f2698e89670c9088ffa0caa2acb93cc0e2b01135e

    SHA512

    c7773a9ca5893aadd189d913d5d9796b73d202ef25b5a10919a4ffd884ca194b5a21e73ba221de84a96a82f03ab23070ed102583f52cd00241896f8de3b63c3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    864cf7ac86decc351dd421a61b20c1cc

    SHA1

    69537242d89277e473c616e39be6fd38a5c606c8

    SHA256

    5baee8547de2c9fa113a4a1ebeaa3735fe39dd4166989a2397e96e1ff5ed44e1

    SHA512

    385192880b5e67621c42ff5a12a7e6c4218adc1b0d66e16eba9c631260e8b2d1d296f159f3dae889a5e542badf7e32991b0494bd033bc0cc69854f10f05337f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1c57ebe8b26cf099b7c0feddcfb90df

    SHA1

    b5e8999c83db973badb6bbec5b66403ecfd54b2d

    SHA256

    d7923606289e812743b8ebb53f0800200c455c9c11a37f78938db59f0e927a48

    SHA512

    56c1d87861b019b055106ee9402d8f66064b84273c831ced166f57d9ee3c7bf096fea4e3127d894f9aeb51f67504476e0833d02015a056fb841f575b0ccb0bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5208ec92d1edd50d01dc822f7bdac8fc

    SHA1

    5bbfe1053f08caca2188defd5930d729d14cd43f

    SHA256

    43ebaf3d9fa24d0d2970c823e66c310285dbc20738a9c33d9c3a9052a71cdad9

    SHA512

    017a3a03685ed73d0affcacb78193443040c75ee58e76a06e0a34c0d9a40c295426239ad84a83826b668e04c78a760be0f1c5985e4a4646886e690b6d3f6104a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adcbfb420baa04af2eb4587f1ff18fa9

    SHA1

    ab75bc2e071a7744880c480048256e730f1e5ad7

    SHA256

    bd699fd9cc4ba73a023540187159584d79bf8e1135750ffec9633aeb4d6bab2f

    SHA512

    8c4fde51cb6048d128249e1f17d46ed4974f655def5f3b6d794c59aa745cd871f1f9f12caca5c27362aaddcf229aa32567851de59f7334c8e2f9eda434806dba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b3ba3317f866efd35792c1fc1e4d0d3

    SHA1

    9e772e5d0967530bb5b4656e46ce1d00e11b3bfa

    SHA256

    3befdb8d8dffc60dfa0ebfe3f53359dfd8fc35977bb37b27c717163ebd6bd08a

    SHA512

    20a11f869d6f0fc147dbc7802d3fcf471f765a4718789f3b47d48c9a72e9de88fd998149ed1a1c2b74d77bc7c9bdf57b25b0d5e90c23a0dfe5372f14c9a899c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e1d72880e5252ef3bb3d5cdeb9f72f0

    SHA1

    195cd88263e00bf4a5d4830e809c1218a59b9cdc

    SHA256

    bed0631941de48a17e10545cb47b76456ed9c175ec695cd3a6268226f98cd762

    SHA512

    f8868c081be60acc6ac673448967bb09a9e03546a4f688268e98a42dd758c200788be17a1bcff7d9548011a54fcec88db148bcb15f19d2a355c0b004c173adc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d2c289395588f7f216eb15523310a3a

    SHA1

    f44057e5756758597d9cecdb3719e9e62a849269

    SHA256

    bdc6843132aa5fea05a2376b13d80cc9a6d81b2489c7d78aae81a1c97d760a1e

    SHA512

    2168f0b115095bc486b3d3784aac76e0da7a049c19c10b85e779f8271275e08cab89ec2e966f6b7fd2ab6c6d6c64696532b90c9ad2b6654b1563b658cfc73b1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2db713c53d3f09307b626139d6aa87c0

    SHA1

    2387660f9f5d3976eaed73f20d1f6ff2902c5c30

    SHA256

    b296da799bbdbd7776a75f91a3b5386a00e2b2fab4782924b34329296ecb58c1

    SHA512

    675f4ce5b1f4a027bb00696f7a5e83a4e77b239336c91b9c2912a9baee3ae61cd1590ec3c055f38565a2e5364a5016c7ad1d5857473b4e1584857dc60f948e72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d02bb3f4a11bcc7c57fc12de060bba7

    SHA1

    38d8145dcb6c35435a90d560905af91caa5af33f

    SHA256

    da1daebe2ee4a02bc02d6a2b1a0a8531b234c51bc008526823052519b1332361

    SHA512

    6966b231d6a05974081548a5aa59815993df87f3fc85862f1d04b967f445aec69538541a8e0896d37f2feefb53989cd42d390169ccf0ec054f0b05a267a68b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e5db4509d182f3049df493c409328f5

    SHA1

    00736ebcc61a7d60137879c4cfe5d349e4e69693

    SHA256

    aad3abcc1e20aecc05097f7b41acaf88efeff7272baad7274198227508e56439

    SHA512

    669e8db87b93b989c2394bcc52de38b3e974a7d57f90b5c26ddf5ec927b03ec25d6acd98df9e9d178dfa8fd9e93cf39170ff0eb376c4510bb88b5ab6e9095f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fb4eaf48073c1ab436ae28a21e47934

    SHA1

    16d77ea4a44d219118c559fb3c6f8a7ab0cf9b95

    SHA256

    3b682d05676a230c794b236faa2ad052ad6cddd44b7df55b056383c9f49bdc58

    SHA512

    17405c456c4f7836c35be4acef47f57e2b10c9c8d2687fcd4de200f3ffdbbe621d5e1f268d52d782139e4ccdba150f647f21d73ca747ff131591b7285f61448a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aa59917cf25f8feef870d7281bf06e7

    SHA1

    9b07b7721cc7d3cd247587f6a587f7cfd7c2290f

    SHA256

    747535250a82acf7d5c7b00bcbc4852ea2e4eba21772f6a7875cc2fdfe1b1b32

    SHA512

    2668397a1f2c7f54a987e953d675547c47f25fadc970ade3c805511237b84d90eeccd8066585b0ebe5a981fa78f1bebb2606080e0512c488162a20fbb900fd2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d14e73067291d6d5135e6bc0605c44f

    SHA1

    bd3da5b4472d6e7621511f886d51658fde2eb14c

    SHA256

    60a11cd841a5d12858646f9b1a7f15b57f4bef5d6d189caa1ef81847583b040b

    SHA512

    d0a6b255df8af4fd0ca02a9c60525c3ae8dfbebe86295824721ad630d62468c9daf9e372c8d9babd4c79330efb8661f430f7e7c3644f23cf597cfb831372c1a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e8865b02b24011e4aafa03d5f90c468

    SHA1

    0f419c16d383b4ebc33f84a6767ecc0a0abb0d84

    SHA256

    fdc711e969ba01d0bf3bc02655637a8c0cfb217a6e8c574912f5a2b36c65bae3

    SHA512

    fd51fe43bf8999251318c1cee1cad74960200abc38f0f38df780b27d34076f3dd8857bec4de426a1b442aee00d365c400163eff61a35d22eeb6b6f660045ff5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac8d1c8c4f20ee055c3de79959aac06d

    SHA1

    c36c4feee26d94f93e3c0b4bec4a1ec88d33c347

    SHA256

    fb33101333e8edecc805b91f667e1b145e6ab02c38b08119c2b9da91b80f7e63

    SHA512

    5403b9a354ed1dfea37e8a1c209756742826b62e3e73ec2bac1187e74fe81e135cf79205f7e51dddbc689ae4442090d17b022f069c183b9c78c56b5c7a1b1fb4

  • C:\Users\Admin\AppData\Local\Temp\Cab848C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar84EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b