Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 23:18

General

  • Target

    44abf8dfec7dc9e30ddda693e0258bb8_JaffaCakes118.html

  • Size

    36KB

  • MD5

    44abf8dfec7dc9e30ddda693e0258bb8

  • SHA1

    a53c7a325a3ffaf9eb259533adf2ae265366f45d

  • SHA256

    7e3bf626dc5ee62f3294486a91f2076fa7a14ea840ed583de4039fd4b6bd83c4

  • SHA512

    b1d40fd75aff563a3282e355750d4c153e4c4bc88a5185951ecebecccb618ba642af370ec13b7f89b6a74632c197877f640d3bc47ee470a5107944b66411f4ae

  • SSDEEP

    768:SflpRBfJ6i5C0nhagjvzgH483ZzUly2CEWY0:SflLBfJ6i57nhagjv6483ZzUlmEWY0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44abf8dfec7dc9e30ddda693e0258bb8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2796 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    788099f008899f6f017e0f6deaf71bd9

    SHA1

    b26e57779ca2465d787e96e456b2db27965657c7

    SHA256

    d55ba4450aaf232cfe3e06b4609add7ba1ce5e52483a2f9238aae803c70aaedc

    SHA512

    042fb1f44e573914e1b525e842a90f959bbd9f4fabe6ae3e9ec1bd60b41d82944e94eed94cdab76aa5709bbe2038a7ce8455a9d080b62049387ba9ddf58f96cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae99feb8c5efdb143b9f4aeedc8af00b

    SHA1

    2fd9ab227784212327bd973e2fda559fea925c06

    SHA256

    b07608e9afd71e2937e460d0637f8b90362d59bf4cc7560c71d94b093e4b6115

    SHA512

    4223d6b93d7fc87795cf32ecf31f93d102210843f63d3fb45849475326ac4d921c62c6a6a8b6ee334caa57b373fbdde57016af7cf5ada677a43de4402d78c40a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    409fc6a1ff6603c2a4e346b28e05fe12

    SHA1

    439a9f7ef17f05c6ba2f31b1cb12bad61f7f3982

    SHA256

    30826afa7552a4822aa121c9b5f10f69baae658226ce59d67aa969f8c6308e14

    SHA512

    dbc29ae3c4ee25e3eb6fbed9d9cce5dd8a928298ddbe87cffbc5b9ba1c532d344cbbe4bf9c9c191909f422f32770bfe5411ddce5f284d80326c43d26f1baded8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5359f94930384070d8bd40c6409727f8

    SHA1

    6b6eb03c1c7ada343097828296974e47b8c19646

    SHA256

    38b8f420c07e8a3878734cbd5583dde48b4a994d4171ec09519e4cd464fd10c3

    SHA512

    ddeaf8bfc98405c7e07c0622ccc12315e1df97eb16ee718f79e6a17d811f22efa0bc89c2bb3b7689b0dd5a7b465123b33eaba8f024bbdcfb444c86698eb9cc09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ef889f0a31b6b4c4ad4cf5d85cbd87a

    SHA1

    d5f9e1dd2f61335a39eebbc8532801cc2acbfadd

    SHA256

    33e7d3cd48a4f72e05a3a6544a9f62b6751c4b930dfa4d1eca6a1b1326daa241

    SHA512

    8ab97cb5e112e6c85976d294eed3ba0d4e51f9f8c752fe214bab54e3bec4fb819165bf80de8ef8c46e91fa2592150d6f5f68cbf12ac78b4f5516ce23e024ae9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2a973f2f3d4666ef33b54d75b3606c9

    SHA1

    fa85b7110d77a8dd1cab57f255a2de2ad241ebd1

    SHA256

    f9fbb801b60dd59c3243b57b57de9f6d069900cda712fbb78804534ab99d8f7f

    SHA512

    7b12fdf90c3c52ecb57111fce39269cb390ddeb4541a8fb57db2dbc1e6e92b6365e5e30df0c3fe26df72aa4887a1b0e77ef8504df291ffc4fdea21e1c88870e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11e5a7f16dde3388eed6775d7b2693c4

    SHA1

    590468713c35652cbe1963db073e0824d60273de

    SHA256

    22f3fcc2a96545e3de2d95fec3fe41234b2eb6dea85550c834b814ab5bedfd64

    SHA512

    137fd207f088b82eb52638b05cd814fe93514e4493bf9904c42eeb5b6eec99e5280340956ed117d59f3d340236d8da45198cff1e21567fc8f1a35d08840db3bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc4a7b05ad3ee925183b122d14b1679

    SHA1

    046f0872057970bbd7d7c14c2b8651597aa6961c

    SHA256

    bc9474e06c2a0a1a35a972b471754a2773272f19fe59cc99292a3d4f81bfe2b7

    SHA512

    6520319db67b5c1e167ea33b4400bd309eae5597f79ab0ffc9bbd22928d22b031d37c1af942ad0c8f3e714cc617c0970cbb42aeaad70b3ba06aa7ac36ae683ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18d8acdbabd07a41d68136601d81012c

    SHA1

    b80a8310c4f0ec2a76c0d504c63ddfdd5f2efc3b

    SHA256

    0d251655eefc051956e650f6b382bcaabd54336bd2f422f858bb80d8fb9ce3f7

    SHA512

    4e083ab1d0b3fa9a3ed1cbacf27310338571b46bba82661b84e175794cb16a5c563cafd2527b2759db324d832f1f8c6cd6fab8df7923c387d27ef39e6f577d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc45df80098e6ba941f82969a5d7d584

    SHA1

    c88a56a1ca5aaca107380b08ca3cce26ebec330c

    SHA256

    097d81c7064a7ba45ee455405957043adf38ad622f9e8d95c89b054719519540

    SHA512

    50dccfb88481a79b76d37a4d5169ffd85f334ed22025ddf2f59022e089cfc1876bc7f68cfbfa8af7b3cff1b295c2eb880892135333ff06aae554429462420556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3185bd90532a5a0fa3cead684e8a79a7

    SHA1

    3cc8dc9d9e3ad3fab4a58f030a95d04e0022bcfd

    SHA256

    bcbcdaab5b7077a73a5d939406925f8bc45f0e8be18c3d3e160fec156bdff92d

    SHA512

    76cfd00cb47233ecd525cae497c2c754411f1e61f1fd9702d6a4351fbcaf7b44613bfff3c0ad357ecfdf3595f2ddd05fa897ae00c69c304908b00d94090c5c33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2007bc8e4126c1596808003aac33af31

    SHA1

    2bd84d647d203e1bc2d12a5661f3e0d7a5d178cc

    SHA256

    1eaa5b59d9dcc17fd83fd49386977478460d78bda7746bbeaf2ba8e518a42352

    SHA512

    2461d79d015fcbf3446bd9b430e999e4a3a51396f6154ccfc13abfcf56f47d141fe8562cd4bc8b95fe2c4f23bc763c0506a39ceb1aac1793b514408b696d3df6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2877d9b33fd56db7fcd06bb152d7e6f

    SHA1

    2d28453330b9939d3f6b60aa8f982934c16b65ca

    SHA256

    48619db8ed1a32dc0ae97d77322170f38acf8de097ab0bd4164331bc78ed9603

    SHA512

    df7e4712f06dc5290d90af5e92c5a4d88ef57e0cf58670364e2e7cac1c33390b2b7fe1bf205fb6315a81c05d8f37b05875c9a2750137ad3cf05d6719273b4cae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    667d3b4763af4026c00bc628e4091370

    SHA1

    774adc38fa98415486b04d4fc534595b0c9db92b

    SHA256

    0d5dee5337891f49ffe07ec8bfd936fe634a04f88234bad53b39fa23317e48dc

    SHA512

    074d2848cafe920f0e97fbf85c0ed61deed200f7c534b02a980e2528774b62db31ff703e4a63a31dbe997c0224ab36067765a3715a4e47dbafd25afb7d90cf79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e10b79f473ee89dfa6ed02fad9ba10a9

    SHA1

    1ec7290c2809902ca0f58f25414b51bb2f8e6fa8

    SHA256

    c3f5e8d5e5ea35f8a781d0b66ffcee313184ed401716ae1fd9bf81b9f7a85b54

    SHA512

    7c125f970a4ea800cf9d59af5582c38f9014932751c8fd3e235bf3e7c7c8f6169eaf8c802b16ef0d3bcb7bd3651838a4ba36342311d988c0f389607f0ea45580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2697ed7ee2a73912fd4ac17edd2b7ee0

    SHA1

    353c5399d6214dd7a11c65bc151f50e583456555

    SHA256

    2ccbd92b598daee0fff99eaf5f09a74547979ace74092cc9f7a22e6e50c3bd5b

    SHA512

    fbab65eee8f6f27d2bd3ec6fcc8b629d861ab1df7546f59a2f3a231c4f36fa82cb5f641e71067ae43715879379f07bc7258898947cc2ad45e2917dd135282994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb6ddafdf046e430f3cb9aa3c7397427

    SHA1

    ef0f65ab089b8c7197dc9519e925b4b8b81424ea

    SHA256

    4ef8d42f25afcadf512fac1a4ce551558b167fb57df5518458986011f689616e

    SHA512

    650a797214ef46b374ca4103d7557c562959e51a695f60a1523a569757dd2d927c99da3b9792361fc105d9eebd5c741a1133b36d7404a5f352a5b72df039eba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4e133e96635bfde93ea2945f336471c

    SHA1

    88533a64fc792dbe4cc0eb3571e5616c459b09e7

    SHA256

    ca91affb0cd71a486ea3ce8809b5f80c83df964f0a3e8c23a201d15c2d665879

    SHA512

    79ea3ebbc7171c25db914580925e20bb57d9c1dc8da0470c28a1af2ed270bfe193ce14837d1457330267db4dcd1c3d3528439814b26c5bf64d8f55b6130a3591

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b4cb1fb8dd049aed3f6d3802b086fd9

    SHA1

    25059da80bcb3d52ae079be06b0bb3583cfbd445

    SHA256

    52afbed2fd5eb226bd1c18eece98efaa10768199eac4b502b21974077f4576f8

    SHA512

    d180731988e97f440baedd27e70b40e02750dab187f392c9db62df1c526ada1d025f1d07110f54f6b75b34e06ea0d777966c3a02132695b3069cfa7492dbf517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d35652483b105c4892f6eb2f6fa5076a

    SHA1

    5c51768313a14ea02cf3ce76e7b3128e6eaaa5c6

    SHA256

    4d86cc37bb96205b7bf921298575573c2ea41875eba47a7643389d8869705cfb

    SHA512

    a89747f4d056c47422f6b2510451280eeaf62875188e3f02f72bc87b3eeab74e8f1f6315e112a72f14c441f3f5b1a3e011846caedbbdedd1d8eb3ad537a8c407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b54629f0c6268510d5be59f309fe3730

    SHA1

    4ecfd651853af360e248ee6030bbbbe189f152f8

    SHA256

    e9aeb78c85ac659b72768781672e76f5d980bd8f2d50525ba5e7a2316b43455a

    SHA512

    69ef845356a720d1a33fc0fbaa2b808be478870b319db45814fe978319673073168432c9eeb5a59ba6cf2fdcbdcb2be497fa1b8b6dbc1fe30566ca98cd724bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5da31ecdca13b3938b037b72626c18

    SHA1

    90d743dbc9c66f4d973e1e3ac9f702f4ae33f691

    SHA256

    b0577c3ec4b0cc7edc4570819c7cea53cd4838986152a7c44b41b23273bcefc1

    SHA512

    e95df9f8ff87f4e2d0e70281aaac7b4754e0d20f035d76600ddf65f38af6a78f5c636e6424baba2c450bfda9f91ee2cbdfefd3590a09027e59d4d3e453271816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b0e61a51fb5d5c0819a73ca95026428

    SHA1

    687544720ee049ac6e4b805482bae03e57004dfe

    SHA256

    4f10c264e9d5268fe92824961bfff1b32a3fcb1a2ea82f65acfa7f96647e11ec

    SHA512

    56a4b0bb0742bd2b9c9de728ef863f711572183940517b47c6a02966d9f74b8fd16d223ca30efeb0331ac18f484d40479c1840a7b5c1ac5538ff21ecb36a4461

  • C:\Users\Admin\AppData\Local\Temp\Cab80D4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar80E7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b