Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 11:06

General

  • Target

    3f7ddc6d7ce5b99726f30fb33e957842_JaffaCakes118.html

  • Size

    36KB

  • MD5

    3f7ddc6d7ce5b99726f30fb33e957842

  • SHA1

    1e186232a9c9ac701f80be5485164428fe40c42e

  • SHA256

    7e716d1cb1eaa0e666d9b28f58f61a179d9a22fd12136e2345a759474babaea0

  • SHA512

    3b95e32ca4bdb52a38d13772b3f72dab7ef6e8648f24dfc458439234deaac5bd05ca9cf12fec7ba337544cb920596ac37da388f76d2ba79aae6fa372e00af3d9

  • SSDEEP

    768:7hUYCGaczyj4NptqqBLRNvaYZb/7SFq3zmet3fh1fmPV:7hUYCGaczyj4FhZb/7SFq3zmet3fh1fY

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f7ddc6d7ce5b99726f30fb33e957842_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    1d24f95db416e373803abacd6bf0181f

    SHA1

    e24ebfecda443edfbb5377c9a9c8f4d0c9578f14

    SHA256

    6e66d636b057bf773a7b627af18d6d407f15b8d70e5b56d32dac27ea4807192d

    SHA512

    b0bfe0d5dc3bc4099e6fddfb992a64fa091b2c3d451458200b9bc4debf27b796bc39bd667d80ba6abbc4ebd9e61f62c8cfd241c7a337e4718148bf1c9209e71c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    980B

    MD5

    68f2fb4a733365d17471f9809fbd9771

    SHA1

    2a192d2100c687e3e66e7a4ade93550290bf5a05

    SHA256

    f21d19c70670a2b312631065826bfd477ced1c707e050ea1bf5b19570a714d66

    SHA512

    f2973b47a1f64033d5ca29896d69c9b28aadb657586f3fcc87e2074def42b5d795faa3ecea1030aefa9435e3eb3d2f1f151412cc2ec3f9cb6bd8127b39517fc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd2b7ca22f4f2a534a771ed5d6aa40dc

    SHA1

    864eb172594887cde21528e6a3a2b612bf28f6bf

    SHA256

    17aa8c9ca83bdb59b3c78db38894835517dd8369b4b7a6eb2eb39ca314b16e01

    SHA512

    b60243fb122bbd60cb0ba4b740253a182f89dddf6365a68d1aec8e2389f56e2b9ceca501d6958a5aa3fae9c310e1433e90cb881d3ac8e7cbcfa0657571b341c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7172621617b88cc7e92aeac172295e53

    SHA1

    a4609eb4d387c9b21bd0caabf08ab3810087afb5

    SHA256

    2c76ea8fbd52940668eb318d58407de6714a7228b208ef0e08acce5694351c91

    SHA512

    8c79db153205a5881ca18971bd2372d3ac768d9b4a160fd42b20e34c5db6ecab8db91fd1b52ca5bbb84341f52f6a553e3f43027514576272024cb1114426b522

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16f8a2b10c0321c79324c70e5cfbb19b

    SHA1

    b227bca882bca80fb02d891ae70c042207b32dfd

    SHA256

    c5d21d641c212d6f28e7e83a3af4c585cddc02ade0099b6fe799c8885d87435d

    SHA512

    4b8284dfad9f904f6fc54eb08b71752bb1290dac3c66accc1a7208a6a231174f1e6a9f17fea768fbebbb624bb011ce98b061bf27e7784c54177f86d8779d41b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14e0753cbb3c42c12958bd033968ed48

    SHA1

    30c478b854027219282ef9f8fc285a52c67c2c5d

    SHA256

    29060c1cf45e53aa0d929ff814c3de4829eedc827c1ba1ddda0ab4367a4b1a9b

    SHA512

    4c70cf2d9e397c1cc96c79e8a15f14f67bc70f15c018c26388add41d4d31ebcb985a27a9e09bcdab3403a22c73728c69130ae572d0391d46b416af6cb1a9e129

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75235dcdbc8d641cb36fa91c05f2e67b

    SHA1

    ba714da1068227afe7fe802dc5da0f2c10cb9cee

    SHA256

    7df0c9dd50d54b3387787f87a8100f09dfe5646388a0d0a1004467b982acfafa

    SHA512

    b94c75e59e9bcfa5dac23e002c31b1a4eb49e80910f1105114b59ac8244c1f07a3e67ead131f7a9204a1dbc56f91ac85d657f7e9aa8477a26dc2fd0a7c7fb024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    131aaa8fb6207761c869adfc5ebd9faa

    SHA1

    f75162a308ed23fdff6099d49616b87efc49b3c8

    SHA256

    4759be21bca2121e6f0df5d9a397751caa57647982cdfa22f19806faf16d5c71

    SHA512

    12ade0aefdc07dc615a2ad03713f97654af685fb114f009d69caf9bc3ddf54e1aa3ff1e8e078a71ce17441e18e59d376d66dd505d20cb95a5a2f2e9c15586dca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ba96dc4bf8841636cdb01d97b5a90fb

    SHA1

    be0123d0daaff266193c8bff8e60b83335cad571

    SHA256

    e61d1f9b5cf5dd24c630847c452373f46d87d3048c87210e7670562ac438f437

    SHA512

    3ca57ce51b9b3a6453fe0d14b1fac3c8d241667c9bf2508ef313151cc38b82c6b4f4c1855bca630c2752859d14cc25a6ab5ede2debbf4d13816fe82bbed9dc3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb58f542a79a17aa8f4b23c0bfc6eca

    SHA1

    ad5eda2510085c163e9ce34585421bfd52b79c76

    SHA256

    90bb381908631f4639a0ca04625040c3688da6a373bc6ef3cc494a87c60740ad

    SHA512

    b2b1046b9e6913f301512fa229d2329b2d3ceef7ef30703492a922cdc38acfc9911981a6e6777d2c6bd598464da5112fcd23644b50fbba4303e9abee476fac3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ecb3e9dc4f67649c1558fefca8e7a68

    SHA1

    88430f789c363db1cecad7c3721b11ad9fecb4bd

    SHA256

    a7efbf15efb731b97363f9eaa49d76873f97154627e45337ced4717854c3170d

    SHA512

    3cf6ec7094e4b42c93266d89868bf776a899f701efe2558e661106bc54adc54002ac192fb8e0028ddd0cde4ab1ae56bdcb72f448bb82ff34cca019a9f7e45980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cd0c982fbe73b52f337d5a361053586

    SHA1

    da030db9538cbf4eff17be394c9225e11f47fbd7

    SHA256

    7485d2ecfbad002a9e8d3f3bf39b311f190efc7aba462225aecdb05096b02ae3

    SHA512

    0281377684ccd097a59429946171576c2d39f05ef2df9fec4a48714a7c569fc7bc7b5f9a11c0f06eb96ad8e381fa7826fdfca796f8236738b18ffc0d3bd8499f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbaa23a35bbe8bfd9926be9881d29d8d

    SHA1

    b49dbf4129717b866bcf709e561c884bfe163e70

    SHA256

    be8e692b4da9788d8763e51cbdbaf85edc219d900241ac6455c2fe6bb0c73f05

    SHA512

    539882cb70aea19ddfcbf95f2210b6588f3f33ee8986366b34ab5e3316cf397d4c0f125a4a48d19cf52284ba042600469c7bbe9e2277685ae5bafa54d58c8385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f9178b6fa31cda38d2dd761774a3277

    SHA1

    27aac0120a7436b2b6fc7e91e65a1e9e330f1806

    SHA256

    e1fc7308ad717e9451b448adae694ddb92985acb449d4ee443d02e44385e155c

    SHA512

    df0bc069f04698072d88c4281b857c7c349425514d9c1b676aefb887a66c1603d7580309727130b3aede9bc57472740258760718a03aff83b98e8cfb2f66879a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a6dd4405e121e7c0b78d3fd7fa3c4b2

    SHA1

    022bff235aceba2a48157821bfc6a1aa6a996e21

    SHA256

    a5d19bb588261f77aed98213252a6d980dda760a0d9df119c5307f656d4a073e

    SHA512

    1cffca38def770b93c91a87b8b20056f9d75f1e8f02a4e1a3a3a042f0645ad1725ff5520827f104ed7aeb05346e9e40d4e326c1305018c49a45b58608ab96100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f4b78a8a55d480507a55a66c4c04efc

    SHA1

    d5faa8dd95e989ca107078fa0d849c9a89585a4c

    SHA256

    0f7ec1dfcb7012bf892b43b2575a23c0e60af4d00dc256e3c4a9acf0333bd163

    SHA512

    f72d0bd4be2f2bd66eee84f89b18a06322c3fec8fb92d445da3cdf97886bfc0d1797afb98750cc3916be76e012012cec30bb1ad7463e896d9c1e9f54d8b204ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36f799b7ccbd4a3576a3697b2e625e45

    SHA1

    b9177fb1824a5caba364b0bebc9eaa36ecd818ed

    SHA256

    c969699c5a0cfb1566868f8234a32f5a761c2eb03efd3d895c80814717c223c2

    SHA512

    c9637867e3eb948b922704e5c4134b0a2657c5da8a6c6b8731be47fa96beb2e88cdec7c75685749ec7c8e9ad7b0582145d649953eba53cabe3803b19743fe289

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80afe039ad78ebaccec6280eb031bf30

    SHA1

    872a849684a42c25cba081779fae7d042476920d

    SHA256

    a0aa389415bca9ef67b1166f63607567ceabe9fa73da35a3cfa06484941c592c

    SHA512

    80899ae6e695b834fcf396c6fc6d428aeaba74e82ca730ebd6fad10ac78dab79e6f42e76b3099a284467cbe4a9f41f35b265bacea2324aee011891fd575c0973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5fb945e10f2f6b9db8b14948a4f5784

    SHA1

    b3de91680bc8f7a3fb320180e8f4c6ea263b11ef

    SHA256

    6b544759d982e78f4ad35957d781ccc7de87de34611390318edc609259472ff6

    SHA512

    cede6234e0cc11e903bde818390392da0c1f6a04b9aaf039b471e9987bc0a5a89f7bbd03d9639b0c1748abfc1eb4ed01fa3959a337e5d2d990e0f4ee0075f04e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d961d3808906e53522a01646701b7a4

    SHA1

    16d7c9c4b6a434f22f7376c2df7a9e666295e62c

    SHA256

    d539a9154794a323e5be7b84ed274fd9bea48680607a146ac4a89baf8d293141

    SHA512

    b5c0faa1902f2555486823f333560b7a6674e2045f97b2c2184cb19e9af1570cecda26bfc4eabde43d1266d3167c4cf701acec87f81fb6094e8e1904a2673db6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26c0e790b53edc010a90a8c6ab8a45ca

    SHA1

    d7dd2a3accb483fb79d68ca6247a60c0e53989a9

    SHA256

    8b7f4f48780150ef71c88e999f0ee0b6df760778f271f074422e724e747bfacb

    SHA512

    e2917389c0204b3ab89511bd9943e16cc601ffdea761a0e175cb78eca19006ece11f71da488bfc081056880a8dc27581221a79b6d009d69d3ee5858f2bb4ece0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6864a8e4a881031d047ad4bb1dfbb3b5

    SHA1

    dbaeb1b8af9837e013a737e2f8a8fe87e35e9764

    SHA256

    09258c337ac1d00b5500e608a6ecf879f5ed229b735b5afc56db360f98b3ef2c

    SHA512

    c5b742d1796d7a05c08ff783761bc58fc2f3c6616a935b68b6d7cdcc3820cad5c704dee3573994f8af741461825e152ca88cfac19b911d251e84fc52e1db4c6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fc79e52a278877f1c55f7ca14f16132

    SHA1

    01471c2980cf48d6965f8f3bb7a354a7a83f7d60

    SHA256

    9c256ca8872b18ca22cdf671ef6407c6929e8abd8f5d5598db6a397a2ed794cd

    SHA512

    7320c440a39a6d0fa052e3a9426de3dbd50e9a5705a52b4cd8d5151cd36dd5f30e83607c5c1ea948db9edb5a95246b3cf6e5bc248c0f56d5749878a8f88d13c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    55a666f1688d876e74727539ded0c797

    SHA1

    f21a948d10054fd72702e9db84bc861827cf246e

    SHA256

    f88cb00303c8d4c0f0ba8d8bb871490f1f98ef07b7560c584f74c2ef8374f644

    SHA512

    4a1e4cf9e81e9f7e8e1a42c4ef9569869d19e558db651cd40ecec73eafad7d328b9c4cf28d418d1e863f2c6b58de0eef18d57512bfd5aa9276728e60d1c90f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    74c95c05326b7bd36e8c123aae786a51

    SHA1

    8548288eba40bd48073f416f8c015d90964ecc3b

    SHA256

    db0e0f25470139fdc4d02c876dd4802815584287b07236878b151a3e2ece15aa

    SHA512

    ff77da585795297d8a68b69bbb73847109226f989bb16ddb93768fa5a11e64fa4879082f0ca930c7c99664769befab387f7718867034ac5fed49e9943f092a85

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\facebook[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabC17F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC180.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b