Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 23:57

General

  • Target

    44d0127c939b722a8283f9bf2990ffdb_JaffaCakes118.html

  • Size

    17KB

  • MD5

    44d0127c939b722a8283f9bf2990ffdb

  • SHA1

    76dab34daeb37b443f91cdb891a46e961068199b

  • SHA256

    6163c2d7314a0a8d3a91b039efcb4217f58fb313a2ada1fe5d4ceb330d0ae145

  • SHA512

    9f7eec17944a1942344edaa5065811343b4ce8d7ceff92f47acb90af03905a367c731dd9158481ca863ab427ae97ff86464d1659bc61f231ddf0d7aa986caf7e

  • SSDEEP

    192:2NJK7azwSH7B+MCtxis8q5MUDT6RgUNgphNDt1Dwnx+pcQ6zN8vaF:2NJFPH7B+hxis8q5Mq6RgUNgp165/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44d0127c939b722a8283f9bf2990ffdb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d0e2d1ae06efb21c352e15257b17d68

    SHA1

    60d5e71d5cd036aaed9090831209d9697cdccd43

    SHA256

    abf9c4054ce3cedd5ab248d364044c7c3f26c7d7b5953a2a53dcad0ae33b81b1

    SHA512

    5b122511ee2c4f684590d4f7137d7098e82fc95d5584924fdfaeeb699e91b4fe0ff921abd09091033d016905d967c600314e2335005aeb29d2b46b0acf13ee3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9774d61bec4293caa52c84b01f11f20b

    SHA1

    09112fce5a4c6c6a52d5394ef6132950f9a12646

    SHA256

    a080d490ec38eab053b64a8dc1e8df458f42105f8b6bb6404ea61d7e3885b183

    SHA512

    3121a4c9ecf999cc6e3f39c37577994b573183801346dfc2d0116823272cab8038989dd38728389403f350e4a9eff1ee9f9912c47be9377e8c9db43a25afa60b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21a57d2f7fa1553997b074a3a8d60324

    SHA1

    fbe5039c804b03b39442c2992ab438ba5518245a

    SHA256

    6cc2dbaa9faea48159ce32d0a22bb16a8305a98236f69e001ba82785110ff66a

    SHA512

    5857dfee7255d1f0bbba2375b8815ecd6c95f8a3595e09b1941f062e43e581472d710eed255167fb184bfc2c0827f4a6ef0f59f3b84cf993a27432006c51ddb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05c1037efc6fb735c9570c1e39846680

    SHA1

    d7e3b34a6a7d00a9ffaee9e4089b19045459aad6

    SHA256

    fef25f4aac235c21e0f6c09687850adea0270b606c946f50a06e815dc05a3f11

    SHA512

    d2fe111cca0c9304f0abac471b9d1f74b478551b74e33651de19025e0a338ed3a4cc792b3b3b582c0ba0a3d321266ea84684ed2bc5c5c7a40a86259ba81b1912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62ac5f38ee47dfebef9d1186639d5b03

    SHA1

    81d631713dcbc1a674fd3a0fd4e7d76a3f7a841b

    SHA256

    1cccd69d618ada23338ac50eaec8598a8fd56e098c657d611b971314c62eb832

    SHA512

    b0bd6880c2c81c28af04671d01b040a7e5add7a29189367422cd728ca90d0a0423686b827eb6dc694cb9775d96c8e1a261ec89b62fa678e62c68d62f6ed53382

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca65b0f656ac1cdb50582632097d661e

    SHA1

    ffbe226da2583e4a08a01570d7511e65c93fb43e

    SHA256

    5de247146a978a982d2c8f5660856d98dc4444f5c639dcdacd13c9c7e88691df

    SHA512

    874bc6c9044b09cb09c51c268d75a5c7420507cdd506e942df1a3fc24c6dc8206e203e3c3c6cc7870434bd27d5de17753ced78ce1b79cafd9590d91ef5c81a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a5352c5e5e91650ebff786688e629d8

    SHA1

    39d7c44f71cc852404daef3b7e17ee6bac8c9511

    SHA256

    2098fe4c36b7ebb45c64eabba8139a4451e30dd0d787114b0cca9bbad604b9a8

    SHA512

    a5a5177d691101934f129b8b9698b8b3b90a738db3b39e6d9da2229fc9dd03a68e08c257765b09509c3a7be5145651f431c9d3a394f3f3efaf5a42641862258f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d47a009130b48140cbadb0788b61af7

    SHA1

    d8b405d6dfa26b00c122c96f3c2f99a81b785d12

    SHA256

    4a93e2e1b5a23131798b22c0503b93fc7fccc7fd3979103f39f04ab32e54ccb5

    SHA512

    11da59f6b649cd2ab7e5874533fbc5464de5dd5aa0a4be07298c18531bebb58cb0a4364e09746ff1f729d4fe0095308c798de202617cc498730d959a8e2c6af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c316d7bf0908e732fe7a90d7a7615e43

    SHA1

    593673595bb180604e9093b21386aaa55fb546a8

    SHA256

    dcd62868e6a8f44233dc0c6ee4c3ca25b96ed441e8b2e577e3d96f0214e2248d

    SHA512

    b052485dfe2adf367806deb9a953f9146517bf4dab706c996f4dda45973210380ea22d269d9466ea02d1d235786e4334471a3fb956f15a7967af8455b95276b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3c827844b72cd3227ca8ff1e8ea63f5

    SHA1

    3dcbfad883d7f3886919b3ccab71deb7335a7501

    SHA256

    9e3f9a8d96285c6b8cb377fe7dc9173eed7d920c7237949df9f8a692f8453b7d

    SHA512

    f277ec0bbc8f257a806524d56999b2feba3b392f750405df8029eaa440121056ef59bbd3dd88a972554b9466ec22614b0f1b8aadb24a2e3a613934efba51d1b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d9df4f803787f8b9e0408bd4f41c180

    SHA1

    b6fa8e9d44fc06720d4d38ccc2ac0b106024e7a0

    SHA256

    d8dbfc5a69d5d7e723976e8d47064ebf1839f35cbe355350723d76dca3eb42b8

    SHA512

    e0be1a625ff0b2d6f546d858075c530a3c5d550f8d66d959f6280ecc7f39359dc2b390dba94de4d15f5206749389d85b1a347515351c03de16350af16a26fbf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70d361c28e945317511e893e32bf530d

    SHA1

    26e1266325f64b243e7901fac6f0adc3504cd24d

    SHA256

    a3bf8942ba9d111781dd111ecfb49fafbd9b0c17a86c385c04ba90df704a3b42

    SHA512

    9654345e1759305ae70e205a02d993ac4dd8bdcc91662a7eb396804a1126d94e84ad063cb81fd91fc371914517f092b3226ea833e50d8c8881701d87169829ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf76ee8f3942875666a38558a2a6f069

    SHA1

    d9099cfa0a10c10860a4dbf6ae53a63a15063c19

    SHA256

    ab86eb1c86ed423f517e6cb1ca55c5a1a56c71818c405d711220e559638819ea

    SHA512

    6de0f18c8e18a278976dda8d959e52c8bfc4595b06f83bde9e04e35f3ecde4bb9137bfc6b69f285495ec0c1aae921f7505718795a3f5743ab3fea9082a4b6f3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fe33b9e0dcb919afbf6067f2b5ad459

    SHA1

    25689cfa7313acd200efb538a495e71b7915bfa8

    SHA256

    b893e0090b6db1f8e238ef75a2fcc4be1688e51978b9e24a8930a43508aa4f8c

    SHA512

    9ea5e22262a27856cb48781b4e95b0b66d6c15e6dbcb46bf2e8850a9f9eb889f4df1260bd5310bb8adf94549c018ae98886858bbaa169454dd88f3f1e85ba187

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9813ac1a5df7e2619c87547842c90437

    SHA1

    1cbd0bb6668c26651adf101461ddbeb679ccd19c

    SHA256

    79501ec049281c9b434157d87b2f397eb473aba2ecb36826271461d941dae266

    SHA512

    471393d6ee0406b329cbc03d40582349fa7db27c9a85f808f7714a5abb0adb3508c049e41ab1de5b2344cb45479b12e941b90ee6aee7cd4f68d6be9a49dd0837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1a8be1e42e31e92051cd22f743f8f86

    SHA1

    e833f8550d2daf3b93209809f0f78714095b699e

    SHA256

    a34a4136d8a46f043384a1d9aa30b64131467438cdefee6ab916b1ac5ef8709b

    SHA512

    a670b81122e96e4febdb9bd02ec0e883e07ad8a36001e3f12f9a968936e9a56e1f6db4827075004ff93f497e7c5876925fce0d89c6aed5fb8aeb6554bbc1954e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d997bebef67fe1bd623105aee33521db

    SHA1

    e7d51f8168cc44a7540c66b72f122a555cf41094

    SHA256

    fd0d501b3b92a28e2706874b6b4ff6c4a068f6408225072c8a3eb4c918d95dab

    SHA512

    89133b2651e40ba93d9154ce2b67afad5762b86efad579b624710a5e83e3aa01c632bb12938dabe4d56286a97c4489f7916ea77b48420647c185b875d02d721e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    831c95f53f316c276d65fca8df49404b

    SHA1

    00a968abe4a8ddf60764e4e5f0ccf23810631c41

    SHA256

    606757710a59c14021ce3c588bed378c202a8c285bd3156ee9a374b99bcd27c0

    SHA512

    a961d0a424837d44e37122aa05b17779dd75c75187816d3fc075bc60bca24b9889937c8d7ef260b33e427b233bd501eda5edfc758748255bc850f9dd61f0e03f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9a84daac99c31aed5aadd7c8d38ef3f

    SHA1

    80296b6d1493433472bba8985cbbd41af03e7adf

    SHA256

    112299d4d8d7e78a52f06ea40fe35f0c8b0576b3f98bf880965faa5372e3a0b7

    SHA512

    d90219f709100fd2de82ab4779cbaccab0cfb7b7c89058865de0d288e495725ac600a0d6e4bc64d5096e97a57ca259e2f0bbea2304cbd7c385a087f77309d434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5891644f840fb6f008da140930cd26ac

    SHA1

    0701bd79f03b83bbf5ba91628d4b1fc32f3c6eb8

    SHA256

    081454b58748267c2912e1751b4de5f3ebf309c74203bae1f8f310e7a73c7b8d

    SHA512

    3e7ed7618d8833c3312da10d9459e39d903420178ea06a8a5c8ff96b02e8ffe89aae27fcde37280752f45283ac046338df1742b1f3b753537cfcc7dc030a98be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3ebb8916da718aaacf75fea1bb912db

    SHA1

    b2c753b993e5de147d59962afd5babe6ce93bc3e

    SHA256

    8b94d82210c933008837bac9d35d0762aaba538a1ce47b4889759b4e8fdef190

    SHA512

    812d8481c3120877ed105f4946ac6da8bf36b3a5170c3ff01112e31a1e492ab97013aae73575ef17c74e2d03909c957053a34c0ad0828e00aa35f7adcbdbd4df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1742f8fd8e6e1a05f8566b44414b4406

    SHA1

    e9d48bcaa013f0cd5780aa7553710be119f6c99f

    SHA256

    0850dfec5f10b2ced463c7e61d3ccd714e0775d1e5a351e1af67bd2b92a7a31b

    SHA512

    bd233ba1e754751f4c45c34a09c6de9e6d7e24c03eb369b40d42f4961b02b3b7cf78771b24720df35ce8ed03ab8feeac6b661f665d19110790fdb6c199c33340

  • C:\Users\Admin\AppData\Local\Temp\Cab85D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8BE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b