Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 02:05

General

  • Target

    37edeecc251313b426780d0d208dc23c_JaffaCakes118.html

  • Size

    18KB

  • MD5

    37edeecc251313b426780d0d208dc23c

  • SHA1

    c91dbdef6bdd24e74f32f8a4ba6c77e4ad64085c

  • SHA256

    5c61c46913484001f80e088e1be7a94c1164b21e1de4cee6e9fa1f8a32b99ab4

  • SHA512

    643ec82465d74d5e4d1e9a3a75451f33d8f8b46563abfb67bf0eb8bd838733ed58db9f0bbeff4e621a30a3c679721b179b144017aa3aae2affc14ec038697ae8

  • SSDEEP

    384:FR8MlXqIJ4t3zKx0IUuFaJye5IviZJqQFji9YwYYYWq/iEuqx88:F1XXUrJhiva0q/iEuqx88

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37edeecc251313b426780d0d208dc23c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f17375b9eae1ecaa4f1f29e132149c88

    SHA1

    a5e9b1a854fa33439859daffebc48396e91d783a

    SHA256

    48a3453c6bc5225addd87caf69f449428a9f67a278af89c7ab3d6c2ef44aea90

    SHA512

    af321ebe3ac67bc88a3adbfa6a5fee5b677cf3ce84fc0c5c5c1f69e1e165457f6440d7fdbeccd44bee5e7f33fbdb2f9be2207d5f74f67dbf2ef4081f87206054

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efc7d6b7ec158f106c2ee47db94ad839

    SHA1

    87899dc35b9be28731012a3e053d320f635ffc34

    SHA256

    8bd18d0fceade3a41b17c7fdd4a8cd2f616836eef5ff8eb6fbf7eca6cae4398c

    SHA512

    5b61459287a0b3adce410271d9411fc1ffde468598d171e9694ea868036d1701b5c17cd353f7c2189e28881ea371e0e39198d4340db94ab9acd92d3095eac002

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b667ece37e0aa8fb0564d91b0240ddb

    SHA1

    8ebee83dc07681e3e9573b806dc32eae09e9768a

    SHA256

    e42756be525a464799b7d077d4d8ab81c723294898a68c1869514a9b269dfa7b

    SHA512

    3915ab8261b9df4af9a5f2512fec93165d2d3c6bbbe571e101f60c19a06387bde8a0d7cecc04840d10eb833f30ceb183c26507550f38b0fc4cf270a690dd1713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb5e937d2fe38b7da25b4fcb266af970

    SHA1

    9d99c87039abd80ae89307235adcef012b8a4f62

    SHA256

    0d405b4a25774b3a0d03b0aa084beb27e3681cef2f75d079c954aa27380cdac3

    SHA512

    25d252bc790210880ca53307658a1efb69eb06fdb090937122ecf3a82457df2e8966869393893ec31dd185dc1bfbbed47cd4099f67e3edd756261df0f548d45c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa9d1fe881012b7d9dc0eae9bda14c75

    SHA1

    39d3c1c5b93419ea637eff8037fe79a8080fbdc8

    SHA256

    548ce455cc83854af14c2d25ecf00f184232556ba5ae9e3fc2e77300c5aa90a7

    SHA512

    a3aff8372d12aaea97d0cdca966b87d50f2de9338e89ef658f3867cca9da7e675c52b3a9663ff2bf047e417eaaa1ebbd12ed33165a8e36035a4a5076799a7eef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14fcc7608a2d4f786449199e163fb3cf

    SHA1

    5c546f62706dafde0839bd390800f04fe40cc6a5

    SHA256

    e7459ba3f79516e06b86789c2f5cae4cb061c11bbfb426f941893d7078eef079

    SHA512

    c7f8e812fc79bbf6367c8151d2701be02ec636999251ff9a9b27a30806c8f1eb205d2d40afb47747db1ab96c81cf6821117736cce4b5e25b905da271a11c5d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf905873bb8ff9d86971220eb9d1cc08

    SHA1

    aa375743a1b88ff39c90e5703d858b4da1b218db

    SHA256

    685864f52bf5499f78c3c0e2a4ed6291a6d4b86f84a5871b7fdf56dc5a8dc16a

    SHA512

    8a6b2cf7f3c238a1762131c790d66ad2f8d15d7632c9da3e1ee266283873cca3fd59493d71b0d06ae47702c272fa2969d96df3d32777e995bc1ca49b1acc9ed3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    592c3da4e90ba3224b2958b1a461d8a8

    SHA1

    3de0859dc246d80e79bdaec491189341239e8109

    SHA256

    a046579ec61038c1d7d3fa93c43eb43b353c200c3fc1ec22193fb3a5d29969db

    SHA512

    3a44a3d65f977e3beacd933202da176c0017daf49501dcfedb130a13a987a13ca6c3def051c2c4e3f8418d937f976805f68a3c5608ddd1f5554a2e099a239e1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faabb9a1bd6a2d73b8b8e907134f7451

    SHA1

    f1e55788a281593f23ccda7528bb13408faca75e

    SHA256

    8904dd05fbea160397b8dc686dc0436664c6f6ece045ec0b0517d345b20bc0ad

    SHA512

    0865ef10df13ba5a404f51c94c03f3c7da10e75521406fd2749a08d713801b4c19b22bba7fb9ec81a4b31511ab8e67437332f1586b36598f098b355bc32c5d47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bdb5c849e42b09fc97982b8d062bbd5

    SHA1

    08e73b24ee50af9fa8bfdcc42ecd8c0d48a85b43

    SHA256

    a76e6ff1c0b7282c0d4997688e8b163f4082d7510400a0adbf592b84ec97a180

    SHA512

    e274e0be959190fd3219c899694384237f1a7920077cecba5273fe7e942fc31a9ebbe5d37eb89b616f23c37159618e2dc488654fabe0ee863f114c02534646ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba5aea9a66ccd6a9f6553fe99dc9428c

    SHA1

    7f6e5ad0cbf2cf2bea79e0e30ea594bcda38f9bc

    SHA256

    56168662ab6361849df7fc98a0e35ee8a5a16268a9113741defe43edf4356a6c

    SHA512

    c991589ddb19bff08c5e61ec5ec719b0ffcafe00028952b34df351c518d5febe620f19a489a33ea814bb01162235b26f7efa430ef15b30fa68ab7bc5092acde2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10138eb3a0501346cb0cc11bb6f136d9

    SHA1

    1684a26718dbe2edfc8f7661536cf9f9108feb92

    SHA256

    9a19360359965055fad8b832c639e18f80e605042368872ec3c92982334807d5

    SHA512

    3520fd979d8938795e8fede68ccd1d04da48525d6bdc750559d3c912e9388daff0a62cd0a3111540e3d233f084f1e7ac8d41c9e45c1020896fecb7409128c835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44185be135bbc408196f414499205c9f

    SHA1

    ae3ce8d8544378d702b374f6dd78224cff5fc1ec

    SHA256

    04eb96836d9bf59581cb70d7cc811edcfc3d55ad5ebede1d78cd4a9c4f928912

    SHA512

    09512a20fef7957d03b330d82f2e7ee5bb5820b0e1f60d9b91bb58eb14bc63dec63b0e3325e594f07e102dbb7f17dc7e003a044602c0add28b350875c64251e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72c3bef1a149a0470b7dafb87cd4e98f

    SHA1

    a02f5b9c5c1011ed2b3a7f5ce4da02844d62cc86

    SHA256

    4a5f3a091485f7dd53bdb93da13adc2f5133a85af7088441e7cd1656f11b6dc8

    SHA512

    b0ab8707db5728eadafc823719d19a5a6156f75cab5cb6a88d2457a27247e6d95a6d023f6b8f163a95892fd6d2a4d34128decab7d9207af9aa585d24d6b0d217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4783ac0bb847ec911bc863ae70777d81

    SHA1

    2d54894f72985e12cc22695dc1fb23bba8d47372

    SHA256

    0754c035538c5f268c072667f8fecc7c8d1a01bc8d49f49c0953186c8bd6168d

    SHA512

    a7b1f0f96ee4bce9efa282491c437e233935bff91e5e69570440ca0d24009940c342b662bf8e229b084a9d9116e4f9c237a8be78252ea20f2486c5a328b5e583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30f80b9837ab81a42a2a2fca3dfaae37

    SHA1

    9c2a79723c18ce7986f598882e780080674b24d8

    SHA256

    caad0140efa18fd52df835bb0bc7b6f402003b821c0da9478188709570e4703d

    SHA512

    92079b8bdfc5725aaf63446a8dece30af84081b71442e71ad518598a00b9b77ffb8cb9d460ec986f50415309c08afcf85a2c3282d812a09fd021b4bea1b38cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b45a7d7d84a3c4f0c0298a3276a68a04

    SHA1

    7e066685a2f87005a4b6f387206f45dd6826ffdd

    SHA256

    84ae4ddcb0ae47738ca700b4738ae55c3dafd9ddea58aebc8568a8493f8432c5

    SHA512

    1ffe7a83306ab339a31f8e4ef75ae700fd5f013da44ee6e418c7283c1b285d8a63f80c26e84c42f6efa656f38c79547491f00de9d1fa541baa755079d9a582b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3000e24981a90ca1579e43ada6d937dd

    SHA1

    71632d24bd8e21b7400bc412d4f1cba313fd2044

    SHA256

    85f5c3d7190289123d20e16f7f661dde2db6b3702bfd1a116281a24dc9d78574

    SHA512

    fdcc31ba2df9e5e96739096deb349381882089a744cff60fa5d7fdb6e025a2a8b3d529ecbe192a2e0a6a55204222686d1d56693f7f81a9ed03aa1e6ad5f901e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa646da40875549d121ffa7f07f8fde9

    SHA1

    09182272aaf529df485d544bdab677f8e87a0e3e

    SHA256

    8024d51448fbb45c24e1db4b2a40203c16241125c635a15f13a5e5a61c958966

    SHA512

    9459d684072486eb86db3569def6a69647fd2ba254bc2626560d30ac49e5488b728fc9459e47129fd56541895bf525474a101ff9d199c5587c752bc799576273

  • C:\Users\Admin\AppData\Local\Temp\Cab3EE6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F96.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b