Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    76s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2024, 22:35

General

  • Target

    3725dfd4e4114fed6b1dd28ae6119891_JaffaCakes118.html

  • Size

    53KB

  • MD5

    3725dfd4e4114fed6b1dd28ae6119891

  • SHA1

    0403e76d805dd098c4d46d74e647ccc5f53b06e9

  • SHA256

    7ab7418ac286bc94e048a2abda57b6ee0ceb7146ed6853711a10e20882180d33

  • SHA512

    359eee35b6a3628905050af1c584855739930a3a554d008c7b89335b96458a4741f003588065bb34486cea22db8cf84a4791a33c0de441a3f983a7c1d70822cc

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUlrunlYN63Nj+q5VyvR0w2AzTICbbQoW/t9M/dNwIUTDmDI:CkgUiIakTqGivi+PyUlrunlYN63Nj+q9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3725dfd4e4114fed6b1dd28ae6119891_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a0e0dd0e2c38782f5fdad29aac053b8

    SHA1

    cd9c52314c9decd05f973709fe1595a3ba987ea2

    SHA256

    3ecb9596e0cde4503899bbe2df5452f348c96f2ec39b3ae3250d073ed34db03f

    SHA512

    1e83eca12510f373d9157dbbb82039c6be6b2f288a32360b1432faa56c19dd4f8185d7dc65017c950161dfa81d5e6ce3cc4b2643cd7e86d0e686a26603c2f03a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    042dc96c66609b44b0a4604af40a0ed6

    SHA1

    39d6a0be0d6e16f57bf0b1a2ec3592b1d7d65109

    SHA256

    27581528e1e13702bbbe6ef30b52097d264742e04445852fb34df3622aa96056

    SHA512

    46983b6e7c1e0d19ca6ae90aeef613edcaf155cb42d046d7bf614ee04c1b5ae47bf23afb6c074daf708ffebb7b5943a0a6acb9c3ce5eacbf70a858b0985a9131

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d59a5443616020343e8ef71ef4cde8e

    SHA1

    701fe57aff342588a21cf71f30a9c91af2bc3177

    SHA256

    95ba9f9f9ab1af9baca537317afb8dd85c365bc4ebcbb437f4b34357d4811357

    SHA512

    f7541e6de5c384fd71dcb3dfb84b70b163635668c99b58d693d6dac75e3279b411d872e4e6c66b6f3e31423980355e918fe787915d267b790fbc8035498d6980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bd702f9434c2888e1c2706d442c4803

    SHA1

    dfd5cb01947c49cc749d379f545a77cef6c323cd

    SHA256

    e4f5818bba8fd8bfa13148a7061d21802243613fd93833aae64984987504190c

    SHA512

    bf76ef35af1a366cab585b0530a670655d6acb9257250338945361f75993033ce5dcc8a09e17767d26ee2bf673ad7450ef4c21f69fd0976fcb1fa3b7e23e2ee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4d3f3f01a7488580c3bea671f80b4b6

    SHA1

    329ffb5f1e8f34e91701074472b5ac25b22a4808

    SHA256

    0e178ab416855187a264904303429c18bb0272b08174585fa4f6a8334e8991b2

    SHA512

    c95a035069f72c281328c7fb2aecbfe2ddd1e214e0b68635bc5a87d4cc2714cbfdf9495e3dd596e553fc68b4059abbd4d7e422fd2bf0f9d37291eabcbc803309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    399d822abfb6a11e5b7cd2a82d469444

    SHA1

    f9d7b4d88dcef3f051a60a56f0a1e70479342c91

    SHA256

    b71848690f0aadc855aa4f7d5594473b476557c21274b53a0a986179741b13a4

    SHA512

    84f94f8d754e9db963f53848309d50c35bdf64c6f0dd02f4bb971af2d51ae039ef1c2b0f72b7ef847fc2eee9b8d60777008025017ca185151f916fafaedd4bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17f462bdea2bd6950f6bbc01402cd36e

    SHA1

    ed330224dee063a39c9f8e904b5627eee9743d60

    SHA256

    95a2dec8349ee0636d15ada5e6c4a8d435990a1986daf1caa665c94634ee7d5e

    SHA512

    6ce28ee29c78999c59a30df0af962d8aee15dc0ac776969ea8d8e1ce2a4d75bd422158b8fd445405fb21d06a43799e166ac04f67cb519567394e928cfeeb25e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d1973a7a7f5a619300ee91cf5d2bbe6

    SHA1

    d86f3217b1d8bac4ee90a9ee764fb9673aa2aa29

    SHA256

    b855cbfbdcca8c49251580a362c0e53c1ba8decdd4eed88e7757dfb319478824

    SHA512

    c363e9c4eb84ed5cfeaf1a92c09540d53973aec71a1f220994f9c3bd08f130a2751a6933cdb1ff9f9f25ae2a9d44c13abcb90c16e7a45c82b6571dd3350f1cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1f57afb01f567ff9ced522c5f8fa511

    SHA1

    3b37a75d3a20fc438fe2dce4f476d8ad274c7293

    SHA256

    bf8dd07b2556589d07939bef77c8ce7e67687782938112584bd155bdcb45f3cd

    SHA512

    9f08dfec1ed0fc80f2e5b3e7bc1fe919fcb5de0fa25d7650981eaa740ab853cadfc29578c551ba676b2035ad77d25e1239292d0ec1274a3cb48ae41dba226c77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd810d3eed6c946b3a6813920b14c67a

    SHA1

    2f090735864ef52ce376bb6e9724f6758463ce87

    SHA256

    fcb8f0e4658a75901f35ef9abd411a002133e07e6b9327a84ecf9226e8af8091

    SHA512

    228fe437e2ca6bed4713f03a3229c345a8f5398a8904be41b7c0e6123fa2dd15bf1ed28ef3920d2c0a485dc87d0f43cfe4ab88110709e503d9644fe36c42fc38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85265659fbbf5b4e02a0aacb232db5c3

    SHA1

    10a60401ee3714ba2f485e0ca9bc129ff958e371

    SHA256

    776b3c229819463baa239369679aeca284cb2dfc8be4c3a079e6816a390a7564

    SHA512

    22597b56fc23a057c3a5592ecbe0b173f0feb27b79b22e2f212e793d3ca42f1d533425421c33b1d4e3e9722779702d67350ad874982fd9d289a400b5341ccb6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cbc03400a044454c8c0782e73f4340e

    SHA1

    5a08126c425ec6a4c0a09bf5fc1ea27494092d34

    SHA256

    9da39d29a1545425ae39540b644dac8503a3203efb9c27337cfa25a6793dc603

    SHA512

    410d6da203d6930ec7b0490afd0a0e58f3b2bcacde082d1b6605320f67256892302c6da2010bf37499f3721e7b69e9abdff0fcd653cd1f5c5fd85e05aa4ba81e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f75f4ebf3b207c23e6255125a16faad

    SHA1

    1b6b7d2674fcddb0ef76f51d5877eee356c3ca27

    SHA256

    1528bdaeab5a6fa4d757751828d6da81530c39391e18e51879f7cfb7abb39d25

    SHA512

    3b4ad9fe1f2eb8cd838a05e6bdb672211a191b3c6540eca5c6093e8c7d654606625127a06d75dccd1ca4be484346fa3a1cafa52c89b4eef37c224f2be593e308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e45b23c2507550fe424960183cdb229e

    SHA1

    09ca7ad28b97eefdea63a94b0d78a1c46bbe066a

    SHA256

    b37cd9872cbdea5161285970c1c77c9833a3085bb932f23fc1e24d319dcb2697

    SHA512

    9117c1c7a71c87945ba6f5404fa3b24c921437a120f3e7e316fde251d86a9ae582a4f254bad51a4d4e003f340a50989e1856bf9c80dc8fcc3adf5d21f4cad06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b35a624b0a58e84e82d852cb31f3e8dd

    SHA1

    596cd6d55014ff40c074044daae9ed659ac73bc3

    SHA256

    a85b97da303dad2f6864fd7b98a5acdb59c13e17549a62a33d73b25742aa2d48

    SHA512

    2738a71d2eabf510d5832c159fe6a9c8134eb43cbb739f2afdb9b94ac27b486d8260b6b6f57acd6d481f8074156a3160e4b5cbf0e7005b0179c8d4ccec8638a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    978d8bdf34970e205ef818c278f22180

    SHA1

    f136c113fa0e36bcc7fdbe5465f4b43f0effe326

    SHA256

    3964d9314febe928d137ca4f8129aa2d2b0a31ce795733e7f93fad7d56cd2396

    SHA512

    f2ace59017aeb9c90ca5d3ebeaa9ef3e4ae12fe265101d464da5f8252f8d2bb92368002ba2f810ba206e9c6cb0be7960c1aea27c77c8c1e5ea133597af2a4762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b94ba8685dd628c9eb563fdeb05503d

    SHA1

    e5ad01ed00ed84a4c645b83bc3630f25d3136e1e

    SHA256

    287ff68ef5853f89cef494bb7ea4c67ff6a9a4ef0db51ff0e7e0472c684d9c78

    SHA512

    4a741d6ebdb331c378bde580a64a0e8c5acacf21835a8624a5914b669452b0b22b26863f605aaade345f711e82329780cfbafc463cb21c8e8bb9b9adea3bff4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b79c676af90d817723a696e0ab995395

    SHA1

    8021023137e09a0ac7a00ddc4042b4d66b0ac7f7

    SHA256

    6add60e047898e5bbcf3062d4ea0b1bab0e6bc718cf5d34195433098052b03d6

    SHA512

    6309e7d346d6b1cd634333762461d19ffe1aeeb1ae288243b0c87d6e1c7433e72d3a47629b16ff3d970c5c2e09a0c9628b7e484176a1214aa66b7edad9d8ed49

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab190F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar19CE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b