Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 12:26

General

  • Target

    3a01678a5fdefd43a590f8d9b52f49c9_JaffaCakes118.html

  • Size

    39KB

  • MD5

    3a01678a5fdefd43a590f8d9b52f49c9

  • SHA1

    cd04bd0cfbfe0c940f61b27c117692d6c7a94d07

  • SHA256

    734c801646a27f817d2845be708a5ff217ba074a228417dc60a5661e28c6aac4

  • SHA512

    0433f694244356c0bee0a667dea1a59e4f17afd101d93eaf38a955affa2b7573022ed9c1bb33a6dfb0576504c29564c2524f31137a1af1d19d249efb0ce58a6a

  • SSDEEP

    768:EmfikH37onwZVOi9HsbgHC4zsFDJFCLlpM6e4:Emf9H3JHMmC4zsFDnOlp3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a01678a5fdefd43a590f8d9b52f49c9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1780
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1780 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e58af531955d1035df5f670bd6441f94

    SHA1

    d66fac608c92c392ce51b8dc4ebbf3d9c2efc45f

    SHA256

    ccfc1e2eb92c4f1139d7638d816e7528bb72de5c99ad65c89cce0ccadbba1fc9

    SHA512

    cbe4d628b52190d77c00cc7349604a98e983f48e8f87d73f9e6823c9c69c583357d969b6644b10f209209e2d2e10e5feca428b497dd26122da2b8e7bef77a95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    158fc7c51f082e7c4c6c9c5d5af8f417

    SHA1

    afec0bd81c06e431ed639a6d1197395334792fe2

    SHA256

    6f83cf8fb02806de0c9c8ac6a0b5a180ce1fafb87824024d3c90d1c261124fda

    SHA512

    26bef52cf2ed01fba5a3bcc55fc834ada6d5e25f04eda4cac9c8b10a74072d767adc322c884a277333e638be94eeac845d3767f1dc7733cb6e2a5f278c2d3514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab74459c34880a36158d84a4d07eb6ed

    SHA1

    ce6ca22f5c2eb6fb422d3ef2a65188ae71b4a46f

    SHA256

    16d1408da24afb17f00a9239ae8639a3f6c412ff8ae5da7ebdfdb807d6d1cd83

    SHA512

    e46211ff44b047aaf1dea26a19d2ac939436a04f01a85c4a978c39f452069f9b91364a57b16b405768e119d869a6134f84613a57e4805ceeae337ef3a8f688d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fafa9fb07825ca6a039738cef864480e

    SHA1

    72ba5f05e535c325c3303a2fbf28a278035ab259

    SHA256

    60fa7d2ea929a511179ff3830eac09ac8894cc667860e9f3ea41c9679fb130ff

    SHA512

    ce536551cf7d6398d13271badb5dce7222de1a05d91aa2b55fe07b25005223a31f4b149bcde94ea86114304c1a498072737eb93c0356550da2e9733ecb915020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05d490c78ad520e67acd60382c61c378

    SHA1

    6fe70be8b99f9e97b3440fb5fd884a7262bb104a

    SHA256

    655a31e81073394156510f57e12a1a781c1d5d614e16856553eeb8ed52632768

    SHA512

    cbaafebde9cddea80dbb60961b6e890cc06757430c585aaf296eec3e166bb20de0cadbc6af61515f4861af57e3d7501ff2a0507ae3b473f29cd891faa1f27876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d8ab99b2dc0ff25286bc202156d8ae0

    SHA1

    7aab2c7e8ef90126ee74ff03c8ec5d933c708da8

    SHA256

    625237c0d43b9147e2008dfdee05512cc46939f956b3639ae5c5c19fe2c0d5c1

    SHA512

    c4b9dab395190dfbbe3cde059e9c24a5a9b932a0dafd57108f6a20ac38a6e8ec6736a402c993898409f471ed8855e3e51de6d56e5fb96658b4d203747e54beaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44db837543beefb46d8e4c8f42da64fb

    SHA1

    4c134a7653b4e546f7b72c4d542d4455161b5a75

    SHA256

    957a50e2e3f0fea90a189136833251799eb4b3b411023ae7fae2175b222ae672

    SHA512

    337fd841ccd44e716adfdd2dfed0a593f181730537087c1c6ab1d172e215817764c7f1d15e71762faceaeed51211480b38c876862e5f020c35351501dc31f3b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d19e4d5b81f726bab4ec20d043a032e

    SHA1

    39bea47fb9879ccc6320e4feaf605162dfbfd0e1

    SHA256

    3f403d3eee43ebb16a7cad4a6051d5bf9b34710476c7771e89d6736bfbde64b2

    SHA512

    966b384a9d39512c30a3de9b1bf7b298c01d97fd789f3ef7a2f33c0a70e55b6a86e9287378081cccc17c3db0e6dbe27affd9416d7ffc9542bdb50bf9bede1866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d33b28bcdad19defb8ace2281c82dbd

    SHA1

    f23408ca8cc685382a3874cdb956bdb52ba436ad

    SHA256

    0d4c26795001cd3b9fd425a5b2f03c86c7f717e87ade0bcb115407d486e30ba1

    SHA512

    1edad5d664893bd8751019b748db1b8ee16709e0b9c209d7c73f5ff6401ff895a1eca49a7e8cc795a18ee827538aa7effc6a286a940a18d56cbb89d6dbdf58f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    999728b5a14ddfb74cc8f768a0658962

    SHA1

    0b2b6832a084475e7df9b8023ca887a49b5c755b

    SHA256

    6071bb601c1d9576cd14a431527489acbdcf5bf75337879f189aa74f6691a15b

    SHA512

    7caf63dff154214039fcc0f17226b43d4d5fcb3a44b5b5d9b3193df1e2f75d14b7019f2fcfedd93e22f36b695d12d1fc319bf9b8e6fe5e44cbdc000a4c215e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c8df0dbb900349b385b56d6ca0c033b

    SHA1

    e97ef46bb55675415039d6d6da32578e8be9da63

    SHA256

    898ae931a36961d4cffd55651aa743ea1230f403600009d80bfd0c26f1abd942

    SHA512

    7a653c8c7013f3cf89b2e2ea07a5b543c97e21cfb845e3ac4b9a5668b5940b8762a8bfb587c2991978c04e66f7f8f3fd610d7e1ba7453533b8bad9f654b3743e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e729ccb3ccbe86734c73f85dbdf4409

    SHA1

    fb66d0417c5cea0ae0f3fe5b6345e92767444806

    SHA256

    9a99429c02695e3c2efadd40196e88251b10e1325c2de848e2d11ce2dcb4db30

    SHA512

    bd39a20d3921bfd94a2cf353bedc869123482877cce31df07739b9f88559902982630f0d081cafe5204f42ee25fb04c997e951ca19bf5d22547ec6ab151caef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1751cf3b064d228929c36c6383ed5660

    SHA1

    5cb0199ecccbc2dca63ace02812034c01a42dc9a

    SHA256

    0978892c38a8fe4d9f9c5d526c192e2a64cd9d6c4eaf2d79ab2243a34311303a

    SHA512

    f74f346c4771bdbf91d456a8e135202dbdf3e03f4c2e1964514a2f5cd9c52b41bcc175d21d57fc8bd0fc767bc59617bdeaa4fe97deecc1630788e43fe1e70b94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1037eb98b933e8099b52e3929be80892

    SHA1

    742e4b6a9bb84f876047c14e9c9f26b8a31cc457

    SHA256

    e8474b9769968f95b9acd444eab3c968407553004dcd9b414b607deba371045f

    SHA512

    2377d40b4a4069a70bae9bca52175ead0f3e58bd9da86a5d1e7faeae76aa8680c6cdae991cea229f02a865161b8c0b070a23ba02f5349df6098a6f8eea346af1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3bd975a5d7080cea49bf42ed1c0687d

    SHA1

    74e6c0e2795e536c463d3ab55bb504495368990b

    SHA256

    361a746f79cdf5481c768398bce2a10d54a22632539cf0d92837667bbaaab1ba

    SHA512

    d6301e0ca523eedef569af33e72b71e5a5ea337e445268f68206b7bafd7aa20e420a5b6dd437a39f488679b14bba94d5f6241892a8709d4cc14cafff6dfd56bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f86f476b9a827286172cb97904f12c7

    SHA1

    86579244cc6754b46dfe1a7c93c232a9cb11b33d

    SHA256

    6bef8d6d7fde3d91f6e70e8e8dce800fd18da4835c7adf8c9fc3acf3b785da28

    SHA512

    e475bbb02612479e3c215a06db795ff913a96a8f14e43d43727088bb0a9bca6bf3eb8b82a200e347f38072fd54dc308c9e5c50ce9651fca298eb0224305b4e4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61dc965216efdd4df8ea424a12ea2da3

    SHA1

    96dbf179d28da5ecc385792481f6c1b39f4d4d1c

    SHA256

    e2cde911eb6768d74056b7cfa212f2354b3a1b609dcb8527a4846b9f2f553750

    SHA512

    cfac593902141eee35cfd88e961456eaf005d516039cd6606ebabff7c8bd1df5dce998026be561bf1cea73605332d2983db741e2940db878ddccaa0886446a23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53ecc7fa3999aac3a30e8e7c84f933de

    SHA1

    95b3f14bcf830e4e811cadea9a44488127b9a045

    SHA256

    1375f16c16081347753f9817e1cdd380f7c579a0f48cd7373371826442164795

    SHA512

    b5d52d7441973d9cf2ab29c8074fa1b52bd9384fced764f9349e94ce647eadb967ec492b0616ec3c4ce9a9510164e89ff595b95ebe48b04d60e9cfd41410f994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24d961470fc57255e0da77191fde43f3

    SHA1

    e839c695cfea4f9b3f212bca802aa11c277edeb5

    SHA256

    99ad126c0213b6a382832527b9c225407580e64595c88b329d85c2159942f1b0

    SHA512

    d392dbfb7a8d07815f23b6921aa3c077e8b11dfce42215b19d111d67a408509ddcbbefa825544c6a434daa13ae92d48d6495f50f65b504d37d4d54637b93abd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc9c0e977f0d912f8e33135bcb625fd4

    SHA1

    bd114a63972d3615d2f4bd22df2788e8fff1ed4f

    SHA256

    f16e6715c605089413d75e7fe5274d9c748c31b4013fae3bc820cfc59b8e75b5

    SHA512

    9d654ebdef04595ced4f6a7d514624a715645ee13254f961c5ab3ca8e99656e201085e3aba8dbf3908492098649af38df742503632c15593ccb16ab4e7a1d4f0

  • C:\Users\Admin\AppData\Local\Temp\CabFF58.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFFE8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b