Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 06:55

General

  • Target

    3e6bb0800dc871759951895460cbcd60_JaffaCakes118.html

  • Size

    53KB

  • MD5

    3e6bb0800dc871759951895460cbcd60

  • SHA1

    3585d3a349f0efd0fc2633a5a60b268e370b1520

  • SHA256

    7accb452c85a723da46a6061702ffd94cc35a753eda190fa1dc88fcb9d26682a

  • SHA512

    3065b51fd042f1e3e867833f042285e94496c45ba0c6a0edd9bb6f9c14e05200dc00e559b3af42909d4696cc1738f7fa58d0c63179366a6865e8e72533b09279

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUErunlYc63Nj+q5VyvR0w2AzTICbb6oh/t9M/dNwIUTDmD+:CkgUiIakTqGivi+PyUErunlYc63Nj+qA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e6bb0800dc871759951895460cbcd60_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2216 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45059e373b2de53eb618839d35d8c4c3

    SHA1

    820b5dee428d024338d7873eece099a6d390d724

    SHA256

    b51d57f4956473639406cb43c5829d37fdab6842aa329fa39c0661dc7434488e

    SHA512

    329ddac3f62fb55121b8d0ed38219abc4e0e0f9abf0bb2bf5f753c70c15f048efdd550143b465d6739c59820cb5ade0d5d554b108e73bc3c613c235d81ce6740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bae4cab53dc2f1c0f395722ad043e6d

    SHA1

    51175cf5d6ec0188081c86cd690f0866f465d697

    SHA256

    23a909123c58dae3551b0c08a11e7c498e8f53327a03ca5f243e391f5bccdf1e

    SHA512

    51de9bed016a9818c8b7b7385182ecde662109210b5634c9cead6179f7227efe6503c7eb99d7a97b470a3f631aba019c53bbfe4e52c8c79bbe38c0577104f7dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85f4fd704310013b8e1325ce1db37e85

    SHA1

    50068fcc46f5979445748c48b93f0ecaa78f09c3

    SHA256

    eea680d70ce3eab6bee716f3beff11e2e067e19ed4e52ab097ece9ab8c7b9b74

    SHA512

    37799ce67981dc1dc86cf8a3f52055e828548fee36b2628fc84450411c115daadbbc93ef38f3b13594710c66fe8529635249ebd3a3e02b9232691c93f15bee4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d8d529e64a2a1a1ae1ae515aa735f0e

    SHA1

    0d50ea7721484f202e746deb761b5c4f1b814f3f

    SHA256

    d666b532af9a3289b0d600feabb098b335e6b515e1b5a534c0828190b61375f4

    SHA512

    dd89a26a0397d1c83f6d90f09b55180b5cda33fd6968cfb5dfd122e5e10fd9b42b4eafd29a6a9b354b2acc34082544d89edfbbdd440c753961c929ff61dd2104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f39ff5b8969c1cf1a88ccba0331f9cdb

    SHA1

    22b52ec56c80ef325565d1659eeabf6bd8c663e7

    SHA256

    0b026108f53fca584158d75326417e053788621cac2be96e4aa47342e294373d

    SHA512

    2b6fc06e3df649251164a4850c6a43ce167b420c5788573246c891ecb953a9ca33a77bd3e8ef43cf0a50ff73f0c4810e5cba0233d37a128a14a7945adc954877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60450d2c1a5629ca1b54ed7f3ac63970

    SHA1

    926410cbb4cefc252d914e8dd4151bd4b1b99940

    SHA256

    b52e7905597e74467f73e7c34ab6d514dd93d35dc618b4528cb56aed7fdd447f

    SHA512

    b01d8d741ca2022ddaf72a00bc939ce8ca6bbe378a3d478bb1301152805409b86fb7673210c3392234035eea4c912b28e112733a9e2566e1b48027c4c0ee200f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aff3574b3b789cd8accbc88076c172c2

    SHA1

    32c31b875f2c059447afb0ab0c59023d327388d1

    SHA256

    30177b754713b0eeafa50127ca04b86c7b173339e9b3251fdc54cf75202c8075

    SHA512

    5e0bc763d992ef220077158ef410aaa2a0b033213611c0741ece0c00051a9850ca5278904c93f9e1a8116e6d42487a6ebae68dc610e3b8187cc6ac6c9136e5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76775f4c4d84fffe4757ffe588a0d5b3

    SHA1

    b9c4fe1befd481643fb120d0c2dfed6955f287d4

    SHA256

    c1360065decc0a0b4a1e2442f779a7f75750d34c90ea360c1dafa21d54ca0ff7

    SHA512

    3e4a411b7e1fba2da50b75b5e98e0205fe890f5626f49953a975caf0a93b3d260bbd242019e4b2e45e422e364005a7c0837a6f15de59be384dfd5c427f4ef44b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7830d715822555a8909566d3e08b358

    SHA1

    13a2cad8aa778ef8b1baf738e4f5de9f849007dc

    SHA256

    cee3e7b12bcedb3f5089d2e7b3c97e47b1940c4d719d110ecf1b23abb852dfd0

    SHA512

    cd5b80d4542a1b428284cc8fe6d0f867549b2b660ea682ab84ea1d450f569afae2654e70a93dda25818668873b7c933689e2a526bdf8060f7dd46788877917fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9c146964d8ea2eeee9ad4b3f7b248e7

    SHA1

    8c07aebc672ca67ac33135dd965a4c1fbf1fd17a

    SHA256

    224f084b5f26341cb299e411cd6634c6459dd23f11ba82913ba6f45f8168e46a

    SHA512

    9a83718fba33716271e525b80232e1981a39e31fd6d489a7c37a10e8eee60880109311616d970b5459ef63dc14ba146fd78f07bc4a13c10c1421cecdacbe82c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0a6b2695ab261f1bf597da1ca3a41d3

    SHA1

    9db88426cd8e4cbd2205675991498d87598c6b5d

    SHA256

    ceb02e8229a21e1e01b7ff277063822ed9425a0018031c693323562b736d59b8

    SHA512

    3789f0d333cfe6899f76e6e91e8030082c4f0ad59d55438196008ad3cb0fca82f4c95fdd3c5f1303580981eb4180c9629f044a5fb829615d601669f415f91e78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a54a6a0360635d620a43e11184cb25c3

    SHA1

    2faa8021f0d38654aa6337c8f273b06589dc96d5

    SHA256

    9db91ae5e4b2e00a984579ee7888718d1f2dfd2d3e6303da46e3283cea674844

    SHA512

    270c34adb5cfd998e40c4e1798f7035672b12cf53363def5a3d937ff261557374f65fd0325b80fa097c274b071b97c5b69ba5a9feb9fac18c49827c778846eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    288f7c70ba72a5f5bdf026adbc200181

    SHA1

    aaa784d36e8dbad9c38b95ec40f5d8299954f82e

    SHA256

    fdffdd0570cd756644d8d01eca4ab05201bdd000ff2febf4f5721786916c7b8b

    SHA512

    c0f0325e0060b312b6663f3f07e0c2ee09b14c19c3a58cb7eb569fdace554edda07b65d3d30b8621d6b0aaa85fe3e21d3366e7f5d0015e31c5eb6cbbea995fd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7af00184ae24663e0c3e2c618e01e7c

    SHA1

    1af452f8c6070804b0fc6410c33b7c4af8725d21

    SHA256

    f8d4baf7c8aa5edc83fb18b3e0d6c02691d38a73842e538120bcb8c752f0807d

    SHA512

    2b4ef3bc72b7a5c118e5f08cd524b318f184a23bebf6001f5f62c4a09b0899ec9fd2fe1865b60ccca07a53bd724a63e07c929f8dbf81d01e3a62e821b715d0ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8522bb743bf06881f521e334ac7a1e9

    SHA1

    69a02c68fceea1c954ef46c15f16b5771b99a3d3

    SHA256

    44f318befee87f03234a19d9e4423f53c64bf448f613242930d19b6d2bdb523f

    SHA512

    cc414b36c73fc35ecc691e72e8286addb6ab4edb7f8d6a582de8e1942fdca712de87dc554d26854492641d7fe3e1b92b9b75023757d4043bc0e963bc4f45e2db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e16562930e2a6ab035c624c8f17a8e4

    SHA1

    ea79def46d319ae1109f372935d3913227af585f

    SHA256

    66149b4556bb1c4e0c256ff5e1f890850c33b8a7f795fd1944c13f898c3cffcd

    SHA512

    ab783e2c3f2b35fa83967cf0bdc924320bb865c124815d0ede02ca71cfc930b65c79ef6126f4feab9ba3744ba366e0ee6d766c974b131d411a52d3a60d0ee288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae54f3b22dfcea5201c181da33e750df

    SHA1

    a12fec2b99746eb06d10067cfea7932e4ba92175

    SHA256

    963e54d9456bff869bc18e7303b242aba43c1412b347b7629c337a2da68940e0

    SHA512

    9c38dfaa25f38793bb25f56acc42e47f42730670e683d0729d3f8c46203775911593050b1e7c54249548e351a981a02c2c25f5b75a30ac6e8202203807418fee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6a2c076a30686c0252f4b3f32758268

    SHA1

    f48bfe8f2a5fe49d2030d97148c60e6b84949659

    SHA256

    e124d63ae3153996f5a63cd4e115ee9f664968fc9dbebb26610b66ca2a1ac65a

    SHA512

    ea4b8daa24caeb60f425d77e5fc4f28110b39cb52f684be8f4ae01ffea406d5f292e5c3b009df10a384c3498d794a5ba5f8a28be4715af36bd3479c8d6c036d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9e7eb94e3bf4c9a82211ad6a252e504

    SHA1

    6a2a6045dc8b078fc65cf88b08e0ebbb0918bcc5

    SHA256

    d6771ce9b7271d940d5bed77ab6a994c0a5f5b60e296b3d8167b1b7a17077f2a

    SHA512

    6705e3543e5333319eea489871aea7890bbec0b658291c94502474c14cdc2a9f6938b9828d36491925ede98cb2957841c67b514c28291264e3b0660cd014b88f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3VL8XEP\script[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabD6B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDCC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b