Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 07:33

General

  • Target

    39034176dc9fc2a29a63fb28a7c8a6d6_JaffaCakes118.html

  • Size

    26KB

  • MD5

    39034176dc9fc2a29a63fb28a7c8a6d6

  • SHA1

    4921ab7656c3fb297602c4a3225881e85fe65675

  • SHA256

    3c119a8df74648f7bb5eafe9c76ab9691ca0684a03bc83d322eeec9abd3504f7

  • SHA512

    38b1563f86dfd39bfdba4588605c4110a144c56b4c1c4ff378e62c8fae05bcf790fe41966f1b326e9efb0be817d042c22212283bc45e4af7898f39373abd3388

  • SSDEEP

    384:InqJVY1vuLglCrkbDbCyP3FgCU/COPh0BHMlCbEWKubfCU76o9k2RK8Ui/F5IhFW:InX1vgaGOk2RK8bHuFeAn2rx

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\39034176dc9fc2a29a63fb28a7c8a6d6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2556
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2556 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2B3B3A22C2944F79994B5FA1B043EFDA

    Filesize

    344B

    MD5

    e59a3508878edf8cbd4315a43f054405

    SHA1

    293f9664be8e1c473272cad800ddf9be79983783

    SHA256

    0386a77047c5efca07644230007def88104c4fae4c1f58c9c62dfeeda199a494

    SHA512

    e8b630d073cc736887f6240cc86ac61f9df81f9976beffb2ffab1d4659c290be20894d34164c452a14c84bf24eec1b4658c283dfd123028dc6ac11b09f0da6e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c63ddf2173712e8b0819e209c86bf458

    SHA1

    e1be7a8113308e368cc6d93e50a9d0734929b813

    SHA256

    ad56a6becb7214d534f6ee4b8ed9841aad60c1839270a30e4bb42581b045bbc8

    SHA512

    8a138626362a6075174f09df2fb3bff6705ab3bd078985cc4cbf898e26ec356a34cdf8995de4aa1186e8d12533fc690553bcfcc719f3a054de37a962f1ba7a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2ee8ba992d7534fa707351a62aebbf9

    SHA1

    98da1e5e0f950d0e176a9320b610309d736d82fc

    SHA256

    bb06a35a3ef066585c4a27c2b0557958c8739146bf787ac9c3a4fad945c7b287

    SHA512

    982c23e428e9c97300277bace3baace14c815911d1371096744df9a1633a4086d43e25c5c83bb2027b53bbf233a63ad9d0c8bc9d10fe49c86905226414345f58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cb0d4760d9a68f72a475bed09c33218

    SHA1

    2183b8b7142646a17cd004e10f3820d54c5d2632

    SHA256

    17f707acdfc60f279d3a593ca7ceac49294ec5839218440dcd8723c6d6472fb6

    SHA512

    4b50c402d60b713d54d5d7fc0252052381e0908477219185ddb4a2ec48cad6fdddbd89e8d8956a46d5ed1b2e093e78828c37379f6c7e3170eb2d3f14f04df7ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd0b41d527f07d0771b7c7cc6a2cef93

    SHA1

    34da6ac89bb93a2b8df2ee20ae764e5bd6ae2ab0

    SHA256

    593443091d0e06a1a1f76b6971ef30916d4a95f22f8e97c4608c20a96096fe48

    SHA512

    9f4d83dfece87bc6a7079e527d235f743f84e7074769d667cd9cf4b7b2adbbfc4206750b99191fb09a22753feb7565eb75ad110b905dc431968602f15c70f8c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c43a268b3e7b567893972bac544082ad

    SHA1

    6a3cacb51a4c58dd3efc16b7744f2a02c6a24fd2

    SHA256

    a55856850566a82a609480d36e4e9c96318fa4a1b8c0c069c7245fd7826cfeb0

    SHA512

    5e91d24df9a74552673d7fa6387addb275359de6aef60539b14596889e42db91b35a60c9a6a9ebc8f88ef333fd4700eca40de4c243dee8f34aa970411c5991bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2e85fd87f8a9162877fd3b09d4071b7

    SHA1

    a90275769210968350755885d2ff8e76f4f75dce

    SHA256

    6f98d2d0ec48296edb52da35eca4ba094b07d5b64d87bb4c69f4a37d0b1ccb7f

    SHA512

    d8b9c1b7abd276fee4064960c7e29e89cc7781060e44aaff0943a8774f7306ec102d6fd768b156619d76fdb2b73dbf77fcced5183e4136fa92d152efc23aff2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17c3defd6b89dd74e6feea21ab37ee04

    SHA1

    5e94e410f7a3f2fa8930cd2d664136e45a29d3a2

    SHA256

    57ef9752ad96c2641475641249cb829b2b58d346884ce9b72f04cc977a53df24

    SHA512

    90f67709f68fa49a54d0e94988dcdf9d324b9b863d75e484d8358f82687aecb920d7493f8a29e6034fe367a9cc59c021f686a74d6700bfe18e9f97cc29c25942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e40330928ad297fa7d4d339741482bdc

    SHA1

    6c98617fff0d524a5029db601068e7c028c459f5

    SHA256

    65b2b96236e8f6626e997b1b3673d4601e5853745289216af9f44a3c0e728480

    SHA512

    3ae6677565bf44f4cc45080fa2af8ffb01808d9081a56737a831f25d762b9013e62a8c341240ba54aa90c69f90bfc6e7f4bc3f6a7a14bce951c27991fd612b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcbfb33afdede4ff6180070ec2f247dd

    SHA1

    c475ea2c776c1e9ed122b37a6d86efad2ea2fe6e

    SHA256

    fca613eaafeba4c6c7faa14d3aa85ee51cd6b8201a1e9b97a5973c3ee446489a

    SHA512

    ec8c1c69ae80ee6977341824e3d444cd23e8ed6d023ba93780abb7a0ae3db5dfecc53af60aa3e9c45f88e19713475249cde86696667a9ce1ac9fdf765e9cfb37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    852e1c615872cb2371e33461aec27bd4

    SHA1

    0facaec7ffb9d8cd0c4f96ee48d149f2dfcf2a25

    SHA256

    c3ec509ab18ff369865ba576d56f1b9e6cf44fe71cbb3ae3be3d4c852e3dc407

    SHA512

    69046a6e2b8da20399079e00b05721726daf71ab6aec75288b69db300487c216a2bd74296de4248359ce07c76cd32add125c3144933f7ea563e65a905e3fb911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c226e16d3ba3727c5907198bc3b31a3b

    SHA1

    f3b6cee41ee885b186649483649a5cbf9c1581a5

    SHA256

    17a14abb290de220f33f7010cdf74f6e3682e31ce41456b2caed7b368549b64b

    SHA512

    1a9b802d6cc5860251395d07a78866a99a36128973edab8b1c4e6bb1f65609c54d8ffd483a69a4f0f38d1cd413050c878becdcb62973b806e9cd36b33a01582c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bb00da385674917889acc9be1df099b

    SHA1

    9f430be7f6164622813228aae62c664cc68cd972

    SHA256

    aaeb312e8be1a4beaddbcd35193e4b545121f53d41eac8e99b75466e4a5ce39c

    SHA512

    73f9fbc37d443ede6f29c42bcc6c5595a9b7266d31bd84b7197677310b9a14cc5bab65545be7d0690ab469e4eac578358a24de2cacbe788036186f04b9a500e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fb586b8f84f9c42a9b0721ab14e589a

    SHA1

    96ce29609f97185177fb7adc4966aeeb2e6a0381

    SHA256

    c0bf5e262b1ec91c4b7d6065bf958bf18aa3503bcaf5a8556e01173167dba4f7

    SHA512

    2891dc22985ca917d628ad02a8f935a59db30c6bc74681af6ebdcce3011d71d57e6265bebb2ca14097b64ca5cd780477b22a6ca8e2905dc6e749fb89d6b725b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    639c80211568eb22d1a50e5371cdcc0e

    SHA1

    c5e8edbbc6c117da95bc9eeb2142520386d1f503

    SHA256

    52e84d0ed53fe99a3b1e2348666c612e3ec9e5d2b73240d54cea563a27b56a08

    SHA512

    3f0b9458079116ee541e510239cceb7f99bf556c71bbd44f620fe43547efaef83bd5c0501b6710034178aead7999350b8143c6657dac674718bd361ff6905c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7c223ce85c627c11ad34f54f6186972

    SHA1

    3234ec8396446a3dc503880767e1da16fca33984

    SHA256

    0bc78485c85549b652ef35de91962304b9e4fc9aa1d3559f92044583afbc9205

    SHA512

    648058596edbad4e0e2fe81b0f1bc9139fcd5f80eb4bb2d1d6e7115b7345eface14819b5fbb7dc85d191b8e08c22d1f35241f830180ffcb34b9dff812d1399ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5b381d42f6156a18af3447ae6f48d00

    SHA1

    fde1ee608d34a013d26e8732c4cdd976511c6008

    SHA256

    98189044caf04eb8d9308123c2912596ab4fa0f404f1c297125b2a6dee77e940

    SHA512

    9264d0d1746718776560425b3e1650bd15ad03991244051a695d64a3de5cbd796d25d345bdad6cb27c2209af97bff8619d9395084ddbff514f3e111478cc176f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4a6b64b9d29a9b3fedd5ecd469e16a8

    SHA1

    38134d504b6ba2bc0b20a95381bdf77aaadfdc7d

    SHA256

    210294cd468fcc3f7b50b8e3f4e423be3800fd3ed4b6b637b5d0c39e726dcd6f

    SHA512

    1362d034f28039a6fcda181b1e3664b06308d38dfcc2856d7c05c8a5307a7e431efcee804330c00224bac85c8e28062c0877557a7eab87201e3d3250c35a352e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9532be84b984a527a4d89ac30dd2725d

    SHA1

    58b1723065ed2860b7bc832b8e12d8a9cf74a936

    SHA256

    c8be19b95460bc8cc392c4c5e02a2ad8dbe53370b0b2d2c147719e437a6f445f

    SHA512

    3414b707a10df918c5cd431afb05914c46e0f0b620ad90ca1b10911bc4fcd268e7f912b2a7a017b5c388e81edd1cf0f7753fe744522d29d9955fac200fb0b737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18f801a1fd41cb8bd8e41af5f37bf218

    SHA1

    29d78d026246f3573d9915c3f1e5eae1a9d4638c

    SHA256

    48f1fcab2c1b2b3b2b0bb9ad1dc1aeb8a6aab8eff51688ca9c7aaadccca302bf

    SHA512

    1377a53ee200613e9cf36493f60ed5460dc0d42896cf528ed2c1b4884db7ef2808083b0cac80d8a22ff6357d289bbe60ec294ee32e51bf5e80976733450978d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea952ff18eada075fc8d64f1f726f971

    SHA1

    d5f9b0fc63dfcbade79ce8aea657bb6e28aaa34a

    SHA256

    8434dc1a86508aa3fb1bc0f6f7dfbef8b8b115daad2df59672aa834945aef5f2

    SHA512

    6a3ca2a5f63a8c314a70e13d7379df4ffa5c944d3b50ee5f3b3bc390b69a408ff88685330bbc5fa49f937455b7e898387cce18b9f752ab88594b847c522a3845

  • C:\Users\Admin\AppData\Local\Temp\Cab98A7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA25C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b