Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 09:23

General

  • Target

    394d8ca98447ea55cad5598ce1b9ed60_JaffaCakes118.html

  • Size

    30KB

  • MD5

    394d8ca98447ea55cad5598ce1b9ed60

  • SHA1

    f9fce1b92691eac5d3db024c35d5c03243fb8eba

  • SHA256

    a5dcad91e78c2650143517740e65ef3aeb32790d2767fb60ccdcd8269a050b2b

  • SHA512

    d8e23ecb0182792c9936ff6028be0ed78400c1fd046bdf04ff9de40635ba4f74d54e315bff10f774398964b2421b65bb751377d48dda13fbad38cc1287c74a9b

  • SSDEEP

    768:ySaaYTq5enJv63u7Nd2oKH2a8keeMLnoMCQffOohsQmxNAX:ySns63u7Nd2oKH2a8keeMroMFfGohPmG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\394d8ca98447ea55cad5598ce1b9ed60_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a06acc1158076accf7c34d3c17bcd687

    SHA1

    0f94d4c38aee149d0de542cb040ab398e3338d26

    SHA256

    bb5dfaf7e64f5dd840bedad22a9042219ae755dc18c927c12cc8de6391dc4298

    SHA512

    433bd6898a88fa4067f8920f489a7d4faac24894b9ec89e026bdf1d140c9e3a4623c20a040132fdcf88d31abee4db525ef7edf8021f115047dbbff663def6de2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bc863e187996ced6a6bf9a9f52d11a1

    SHA1

    c09a9688dfab6e5c0fda827e9dddc8f87dda5265

    SHA256

    9ee6b70fc091fff0e3959cfdb02cc0a59c77a1a0bdf19d4d695086b7e0f63593

    SHA512

    d149ff1bc8742aad8352e6c9ff7a3fc95c2fa0d528b74e2c7c83dbd6d79acdcaceb4de038fe3ba6a834dbe4e5873087d44ba5717e309f1530eec4835baffbecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b666bf84efb5e8ee1da64859cf8d85b

    SHA1

    f1ddc04350f16135fbb7044bd71954fe5f03cccd

    SHA256

    9fac4281517b1929f85739b2d17b797ff8298ebefed213b1edc0d85081d8a623

    SHA512

    49cfc15e6d7d5bd7ded36de12f3683688c88bd085159b9ce7778b30ddac9a714b9eba8e3b86fa64f062d5d73fa318453708d2325a5358887de7b323ab57c9198

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    304daa3b6ed387b260fc88c8f74c7095

    SHA1

    ebc3297b5654fa4d9cc1284872729f16556a1aed

    SHA256

    63b38d82e7a8fd66a0ac3ec9428ef43459f4b8c4d97906c79aca0dbade1cf5bf

    SHA512

    108a21a9b1d7e17bddca314a7edb78a7acc87e460a9a5afb4f53085dfa296f796be3708808857a52e0617f6e8164fc61b9d929ba8713b04c7644d4643f236abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e76701d9bf88273a6f3de1d07f03018

    SHA1

    845246aa5f39903495d62992bec8eecf2e865ed8

    SHA256

    5bc5782123ebb263ba464505df1e351d8124df390e5831369725d4d876f247ee

    SHA512

    ac2065677b8cb6415d2a71ade7723793b4ef4924619eaf4b719b6e404f80b2d7f9f0b83e2250ccd51fd89bf44912e44ec52e3883303c888bf6f2612a63263255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d50f49e8ff7dbf1ce1487032cae1488a

    SHA1

    f0ee0668ef863500e17bab8a621b6b1a71d7e204

    SHA256

    3f4b1109717d229a39a6d859ee533c324ddb23063569de3366539ecc63fefa73

    SHA512

    bc020c718dac5239633d7b713c8f26f72dffefebff3fdb95df686536eefdbae59d71e0d1cbf7dd9875270e4ec768ea20dd7442c32cfcdb8d9e412665e0ee5a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56e2b4d9a8428781b896f2889a604b80

    SHA1

    d0a4b58b26d0a17a500d7ca648a6988083f33da8

    SHA256

    9639bf4aca2f41a4175785044e6504396b7f56494c0cb16c4fa59cf5ca8e5741

    SHA512

    2abd6bfe7f7b406b8153214b167911e632bbb6c6c490cb25aa05b1b08a2713e05b2e509828a4734ae16e1be18059d900f49ab5286766547f2c45e618f24bd34b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fef11efb2e3a926a75916d0b90d51ea

    SHA1

    0189b6155b596caf470df0119fe467c7c7cdd0e0

    SHA256

    8dffee7963fbd54c01feaf49e865a80a4d6e5838ebf26619cdf566a73b16b2fa

    SHA512

    23ffe6a9eb374d86f697671b2cb3b3f9b76025dafa966edc815a13bb7753afd3370be1ae2dc86064c7aa1b4a30fdb97081d2199e6edca4e77bc56f9b69981a38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b9a86a804834612fda6baf744086c9f

    SHA1

    f8d5aa45507c4c823665edf8b16340ecd74517fc

    SHA256

    681bacb8e7c2ff94f18c02c21f31ac6e027ff28a03283a19377e1bb9bb0489cd

    SHA512

    e8f7582bd556529fce71956e6993546e19f2c2b4f2d72f3313f78601f2f2a996996a4cc2b490cba48cbd55278464d9cc086b7af97d4f8da681d0335e8fd930f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    426bb37654bf419b5b880dccd3b37b56

    SHA1

    d08d0430e87c64d66c8f2f517000aef0bc55febb

    SHA256

    323c660ecebf1d7c8af6f35232eb30b5acf5ce5a05c8d2ca96fb4a5c30508b5d

    SHA512

    b3ed11880035718903cacde4982e70fe67563fca552518bfa9b39ae53eff0c0693ead8d6e513358b860d37670c0a95fb966acb310d96e082d8468457dfe258d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06dce6a25fff64c98ea207c399692283

    SHA1

    66adc9e08eed0aaf0d6fcb44d710466fbeb2ccb6

    SHA256

    e3ebd35b307f795a1051756144843f9ec48d859ac754eb2aed7bda36902d0541

    SHA512

    c9ca66930323242f1641e4dfdef885b7e3a370eba1654a3441b0961ea6ec4786a3cb8ee983945eeb171095717db6cde333930458e8aae67bd3ea4f02793b2812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9af2a46a47301962e825fac24f9c1325

    SHA1

    2acd8ada9644b73ef9014c767182a820d4c47a74

    SHA256

    0f8baefacc1956870a2ca15f1bd3aaace5f7ceb3cd41f3fc52a6bf1eca9bbf0b

    SHA512

    c54f088ffbc851f118738e29f402a4246dbe657262156997055c8230f476dcaf12350141835466e1caf459994003b4c8a83aacb2aa89475d24cefa82054dbd9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d412b1e5bc0d75652122f3ae5c9a841c

    SHA1

    375dfce990f1d4a19be3f3fde647029f439ddce9

    SHA256

    0e8a387b58199e17b684236d5a1b8876bb47fc44bb4475a9ed76678a7bf11653

    SHA512

    e2530fcd887f853911dc634feed625220426d8633aef77a951c0bd40ab6a384b34dc4f5033b195693e988402d90e5c552681f0af2e2ff0a2c493f680280111d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b22c5534b8bffcf6eedb256ed2e93733

    SHA1

    9a7d9ed872f9ce1ffd0680977a3ba91b5b908089

    SHA256

    860661e6993f3c4f9a26f5623c1aded1831bb980d1c8abbe7f2724db70a8bdbf

    SHA512

    cfa6e642330c2e5ce3be8355903ef59a9e79d3057d59b2aa09553de3b50953ef4d9a3c4454019d2d4006945051b9c909d81257cb0024d41451cf815cdc5923da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f66637cf991ff7473336a7c295cbbe4d

    SHA1

    196c6623731c4a46f1642e185c9f004e57c860c0

    SHA256

    a8b6eb9b0c0a6017e3751395f20e7864f05665f3d4207318acd5a83cdf8fd020

    SHA512

    13fba733eda169ee5f28b242e5e9ae1d67fd1c4d8728609a99108513617d2059dd1891f0c0c1d3111a323ad16e5df27d1a96e5e794b4d5975ca1f65079480a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c88d1233a1f5cd378a08df0cf793e5d

    SHA1

    d945dd0efd674a968c31daca978321ba2efe404c

    SHA256

    ce64806fb02de37f941a0094e308328d788a6e3cc73e6278747c50411d3f35cf

    SHA512

    ccc3c43392243c491fe4ec38363701c5af3d8697a097656161fd3ee7d4f26f41e3737212946245e1c8c070d1fde9e73d5e4287674297185afebab6e747f3fa5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bf2e67aa57c170fa9daf7287a4cfdfe

    SHA1

    ec0ba5ad953fcea7b49e1d087224edfb113a9859

    SHA256

    56ef7bc96298529486ef39447ed60133012b12338df9bcc87c9cd29ff47d7fd0

    SHA512

    4ed7d7149d6f9ae357f8f0155632f1f567bfc5c398407fe0585bfe7b56372f23d1c6509bd6b2def2793fc8b4dde981e52283504da5d439ca6624de853bd968ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    249bdc0ea4e59225ad872ff01313c528

    SHA1

    96af92e0d28cf1f1640907fc73414177851b2549

    SHA256

    fcad91fd8df472924079bf27a4a45da66a72da929e9b6456a9ce54d82aab8663

    SHA512

    20acaf47fb4cb18e7c65a3e12cac4b21c951c7b2a7cc08624c48cc3bd1a8e989d0a384a4c3490c429eecbf58386700dae06be977b24a623eabb937b07d128148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78cb36271be979b6ec41d95ff8d3ce77

    SHA1

    e29da4a63f8c0636369cdf0cc8f048501fe35df1

    SHA256

    d8ed2dc90b5ddae29fe2e7a3b3c2451c3d31e79683d269729732775f7469c553

    SHA512

    21dbc45bde2a1f534c16fc8d19162b96d88bc7c8f9abb681c4640fc1b80108af725eb07abba03e4df47c540cf0c1f36a64a3e5b6fd2a74fb3fdbe875a0e55d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa666616a165444af90a1c9dbdb6fcc9

    SHA1

    109506462585536ad57412305c5047348f64d2da

    SHA256

    ccfa353e0e83146e1889c3dc31574f981ad2db0c7a4e0df46afbdf943546494d

    SHA512

    57585af6c93b4e815d31ca0fc14848506238003000dade5dfbe9f304433f3ed81a9b0b48e319589f7a06ea33395ec86369006034e3002ced9d1df4cf148ff0c2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K0PVW9XR\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K0PVW9XR\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    ec0bde1b421dbb2f9de32fdb220daff2

    SHA1

    aa4273e506ed0a091e4b8177aaf75d9b2332f240

    SHA256

    e55ea0525dd518ad7afd157a24687cf658a9c2a4c627a7e2bf89830e23c39a1d

    SHA512

    84f1d9de515f7cacd66dade5e2fe49ca3fdf63501515e5cf0caf82e34afe07bf45351d2920e8bc2010ba52fcbb9ea96609fbed57079c4bd2406cfd527ee57e60

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VUUZQMCA\cb=gapi[3].js

    Filesize

    66KB

    MD5

    aa012028297a26c039c37ab25a4bd17a

    SHA1

    25f23d01b5f580c00778e1c010225e5b8c73b66c

    SHA256

    55cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38

    SHA512

    d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5

  • C:\Users\Admin\AppData\Local\Temp\CabEF9E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF09B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b