Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 23:14

General

  • Target

    3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html

  • Size

    139KB

  • MD5

    3c88f8d3e9a71778092116e8e62efb1c

  • SHA1

    00ebcb6fe5f279508a7f99fbab121f99d059a10a

  • SHA256

    b40333d99a5d5cb3e786da6ed1577bb4ae4f8454e1d2cd2e318f5845c7d881d9

  • SHA512

    cf31b28a38719875de9f170be13f70f5b7d6edc4e986bece529ff5de37da6204a879a4cc6a0879a81b2e5721d4b099d5784b83d25e7c210152aa99288f045edc

  • SSDEEP

    1536:S2HbVM4EbVnp5ARbHMl2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:S2/jyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3044 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60a7df5c49f929f0049281371dcd449b

    SHA1

    ba6cf09552d1c5ce9ef0582c297f127d0228b2b9

    SHA256

    8dc0284973857d5ddd4171fce34c06af14f5c44da82832cc56f45d4da5d8f0e9

    SHA512

    e37a1833a4bad14107e80f612b79230288df886db52f5b0127081949cc0b7e06c5b8633521d8fd11ebfb78d047e834e4d28bd61ee977726a792c539e4ac5e80e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d428831f86c90372c2f40e5b1e1ef868

    SHA1

    be6a51bdb1f311bae160a6bd90f4178ba874e9da

    SHA256

    91ed9b42c9aacfca09a94bd8993b4fb590293b9f14f905baeb6f5d880e41ad2e

    SHA512

    e210a314d847f4577d33799bb85ff390cbd7736ff38ad0d28d2b67ebbe3f07a9af0b3df3c4cd2e2398ef1c3ef0e4a20a68b556fd6982b180b228df7b0ab80053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e19c00ab3ab99f18564f43cf047a9eb

    SHA1

    3e7d95257a8c916d14c69ffb46ed62f3b7b11360

    SHA256

    ad82845e663d1ab23964f3ff0c088a1376bdc62547e765fabd62578c8feeb6b1

    SHA512

    b3bd0b80efa7320a4477d8035d0f670355ce0ef07b808c24b965d624c18554fa43df0955967480678ade18248f6672e6eae58a845855ca659274e502645e7ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad8aff8467b588f17803371c0287c6ae

    SHA1

    909ef87b663ecea59db8a538ff40c262ca6269af

    SHA256

    1ace1a19ae0357a8aac221c024ef912ea8ad3f7921d8ec2deeabb4dc66835f2a

    SHA512

    7ab1497ff674a8950cd651a831ceeefc02465fd4f1586d41bbd234fa4cb848e686388ddeef5e5fc1e30529df17fddba6b50ae2ad065b81dd7acb591f82f05455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06cdd0c1efff0643216aa81e98e36d93

    SHA1

    2b46efe3b2d6f9762727a98382f887b569dee7a1

    SHA256

    910f2897c77a74e8cf6fc944a104783c20c76bcadc6657789e12daa97b2ab27b

    SHA512

    706c095220437a3b1cb3d5ab496cfbc14e87df230d2bc477831aa37a0ef590f307b719b3f218465b2d0b04e6f7da01eca6e44d00e7f3942dd2d37e3e624d45fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66342b528fe095b3debec0ebfa233790

    SHA1

    9302d3747975e99e73928d00aa40425da817176a

    SHA256

    6690203ae69eb9b1dd24de0bd93472ce43e7992fe6c5a6efa7ccf4542d099725

    SHA512

    c679a254271e59a570f674f0198d8efe84e95e94972f218aee3ba638e732635e6b6f33431133e3674032c5077b2c1afe122e71ede73eb12e84b62d5ca7a334d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9199f73536b81f3ae1c44e7cb32fd572

    SHA1

    0341325115d5018865844beaee292a1ab5569cb5

    SHA256

    bb260c8cc9dd9d73560c1e57f057bd953d8883c3f39379289c9a60d0f6f63557

    SHA512

    c6d10a7d31c2b0b150d43a35069983ee3a7af3cf9b844a155585d6c5298ca1f5cf946ab3b61dfd9c9924b2b66dbfcec6597935275669304e15c75676657faeb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e1d0fc6eb8a3b8167c8295c7f221162

    SHA1

    c9ab1c565c807173a073a8462ac421c705f862cb

    SHA256

    70f0c0e628ce284ea04ded5c479bcd5e8c417e4cfb71d7b838a2c419e1feccdd

    SHA512

    399c123c7efb7cda0222d79dd6fd7f6209bc012d8e2aedd1ee04eb995a337022b67e99abb5a27fced6424b038e3a20b07962652e315be7985b561be5c08c7388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c2192a41f00a77cfbc771ea1f6165e7

    SHA1

    3c72a06bd8f14065b099cca049f8fa1e219c7c5f

    SHA256

    a105779f397b7678473f76d0686d32cf4e33c184195f476c40b7011c181bfa9c

    SHA512

    0c3a9f5bb39b2b84f114da55d0163b536ff86ec1f914477b5e0a77dd5e6f1ce1f0942ce9997264d27b0eecc9b8fad75059ca95feaba4e6b98d6569faecd85de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0857b6ec2f3d930e7d7411bcce4388f5

    SHA1

    955843f58492112de703a3aad857ed30c6c2655e

    SHA256

    1cee26e1ebdf8176b824192efc4fd62ccac279d59029983cd2fd044b0f789ed4

    SHA512

    ae269a19551aa29467b88badae48b6cf7be28243297cbfee3aad02915f91cb07bc9e1a025f8a93585502c6b327bd3c90da024428ac2e93952ce829c1017fb661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    349c70e787a48c164d74b3d43f092222

    SHA1

    62b675a75685441e839e42f8e66d99302cafa841

    SHA256

    ee890b41318b3474bc662da61fa5cad00769f8d09ad6553202143d99942017fb

    SHA512

    b6dae7c715039deecdc79db14a7c06736d47f397928817c2641fb9a609753d337bed5de179b7337fa6f4645593e85de4a166bad1f9acb64f5277d678e53e6468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e89f450b76cbd032d6f21ad9bdf599e

    SHA1

    f5c26b51f194131e5ce2319e17825f71ddfa66c4

    SHA256

    5c05f4a3747a81525fb3d3b24f7dbc3b7629c66ee77b32bf0632c7b379636701

    SHA512

    5c085c9b716b1f43c9056e0348c5207c901e1c544a681b1fec308a723376dc0e6dbf9f36992f267464304655b8163fd2f12b94a24db220593a0e352c6ca41d7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f9e2a37cb56fc709667b8ea3e566c6e

    SHA1

    c8835aabfb95da4b99fc5439ac8d1d6f5958ed0d

    SHA256

    25759aeffb713e86cf43fb4072065018916a1a1b644c55901f329afdd268417b

    SHA512

    eb41da8a4b489e38e1b763f4ed51d1284a9360bcaa2ba8809ecc95ebe6d51169b13d1f3efd700250256d4d33f43553d5c20149b345d9262540074c8df18228ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fbc1b046ccef0daebade219cbc08c68

    SHA1

    c644462d9347ab91240f747cc4dba03b91ba6c86

    SHA256

    d00f44c8197115d555e8c1072a29da75dfe33e93e94b0e8de2dca68757061785

    SHA512

    55ff22ded62a60cf5f16bc5e38a5b6acd62eb2630cf7cd22d6058178603ceb90ef53bef582764c7e454cdf14cf3cbcc454b13326876d65f1121b78f7b5eb4a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    267f0a29f9fb692cd3da77ef1b8790e1

    SHA1

    5e09f93fdb5be4bd6925eb80e3e1257b5682c7c0

    SHA256

    8d71c74cbec6768158be241962f22791ba36b004561a86b2453ab5e61fefb803

    SHA512

    58780f4d0d53eef4b61825841f3db446baab6eef2a61997f5e21e92061f83294f4d093635dadc72983d77981c9af3605214663d7f71ab055bcd79774394ece54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67dafbdf84806a03550efb39e9479e4f

    SHA1

    45daae585d11e814683b0c2fc0ea508e7a9e1571

    SHA256

    4b21001516cf05594f4a7a0922d1bb5c109ec61ab5a847b2b6e78ac9957d9545

    SHA512

    5f3f598809bdc84d8efe9e5bf42901d7edb5b4731fd9c3a91bfc995531f20c0a537a19a79a136c9d59f5d7ccfbca2f4e0edf8bfc1320c2d54f413712295c8647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df873f4b67879b7c52dfd09f82ff70aa

    SHA1

    3b2b21cf9032b19f3ddc0b79668aa66f11a8fd29

    SHA256

    57c7735498228afe9b68eba68030ee2870bb169330cce9c5b09dac48607eeea6

    SHA512

    b84f6dcb46cc1c73890c464ca0ddb7959c9e1f062f654f7927b0194436d96d169c402081068c6d6e0d3894d78afec208dc613187e3c154614c59d762462680bd

  • C:\Users\Admin\AppData\Local\Temp\CabD79C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD80C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b