Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 15:00

General

  • Target

    42c73171290408c2c29664ad32f2bd7e_JaffaCakes118.html

  • Size

    40KB

  • MD5

    42c73171290408c2c29664ad32f2bd7e

  • SHA1

    cce0c48bbba7d7bea5d164e293971189401104da

  • SHA256

    a77f09f34ded1b8ca2b7bebb054a613faa9255531e81fc9748f7f08169100bc6

  • SHA512

    23151c2096d441995ec52380f1a9208472714895e0fb6928b2cf69b771a36f2749a464a6dfa9108b41661085d29d57b829c546883c44a35c924c5902525f369f

  • SSDEEP

    768:fswWWCBBhBlywyUvdB5+RW7UUCC7rMfhlcFF7yfVDM:fFWWCBBpyw5n7YfhlcFF7oDM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42c73171290408c2c29664ad32f2bd7e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2392 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8370e1cf71e1faabf219991da34f2261

    SHA1

    d54233c3b29a61ff6247b6b02cc7c0282a587d43

    SHA256

    57de027d106765af6da224640561dec24775e9cc1f3515625ddf14b21622d2b5

    SHA512

    da9c261f0bb785925802d466ffbdc0a8df0af0025f7125b91702bf554096b534514a32674ffcfaa59bac119bb3f52bafe8b126c4c349b2a245f8386f83449d72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b85b0032f02ef198d6f4195c6ed434e6

    SHA1

    6f3875914b3235a8005603a0d798741ddc565dce

    SHA256

    277789fe2ad717261ac235d508100bc354900964361a62338278228f20f06131

    SHA512

    c907ae961b5cba688f876ba1a8b47e6d1a835e17f341af996e588876cde7202405985c3bf6d16baa29f9cb378feee7bb227746dfe5c95cb043d03ea8ec8fd0b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbeb0c004e5c861628693e0300a77a9a

    SHA1

    42ed378a95919701e009139e48b0613ca3fe9abe

    SHA256

    ef648556e52831d5b68dc4a1fd600cc5506301de64d7cd4dfcefbf9fba372f57

    SHA512

    a22d35ace45527c34e75f08d003cf87fd361c6c54dd3fa4beb3f66e9150d24d67a7b751fdfbce1eee09de3192a417d2d22a62ee594fab842f5527f06c28048f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc002d026a75afdd551c86ad1ce34613

    SHA1

    8eb52e3e28749837319a9696034724ddeccf03ca

    SHA256

    338104f7b633b711cd36dd13629f7dba6de339bc1e65e229f4b14848acebb73b

    SHA512

    9cdbc1ea973f9bf55b8a6b61fbd6473d8c47b46a581446cb7ef71beba7e0fc49e958b248d83d4a1ef5fc0b4b2fe7a8d1d50b124ea2077125a6e0dc09f0165786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b3eac979eb41ad8d048bfed69712ed9

    SHA1

    87815ce4e8d1fdf989c2ec4ffecbdcd0f850c42d

    SHA256

    5198aeb1f1e621884bc40b043f24f3662ed81552708c594c2ec54bb3d43f7295

    SHA512

    c31cb1c9ddaf2f800984ba2b147a894b9d53f8b026f30576e30aa3890a3f8e869b2b798ad201d43fb82a5ed30597bc9e29d51a925ad2ae2ea9b1ed31fd7d4417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5b9f323964322232b36611c9d0b7a3c

    SHA1

    fe95dc6c07b99ece8b7c88b74bbfe3e6c1b8b6b6

    SHA256

    b91413f19640e55715bd1b701ef2cd274e4090584bc1a821a5c253f8897240a5

    SHA512

    33ebb02bc6135c0f2b4a078d4fe4cda95e220d7645ddb39b67579aa47942dd8a865d64454de49c4724a88d55a59747d246111b424b6f3fd0c81d7cd22b49e42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c818b01a5490c3f18ea5d8a94acb4339

    SHA1

    d9dd750133d243b8ee42e1eb3f22d6a304225f1a

    SHA256

    1e6d501256bccd38d2acff94d45ee4315507149a6c6b8594c34140db0bb217dd

    SHA512

    4bc700edaee36f3b6dba01e02d428584b8a04ba2c8454470a6dc0a828d01b8ff74e76a8060e64a407b074abaec4f64d97ff3902c1c68279327201559cb5a74f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9f6b1b4dba37fbc8660da20d187c0f4

    SHA1

    782ce377c8a20fdb6d4f8f43a522651315cef787

    SHA256

    734bb93c5a8fc2faeec0b1c458f6198c4baac5d2dbfae2cd97eda013de08b436

    SHA512

    a3c80d6c843acb324eab19cddf41977e2982c6c1b8013a0da72fb71a2611f15e39e0e298085eec5a591e43c06f46200c5cc11d668d3f824a49f5cde6e31ec3bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    431a4d683eee8c521f3638704e631403

    SHA1

    75e75d9d50fcdba19e6d2ad71e46c62579dd6f85

    SHA256

    f5bdcba2317344277288636c41241682513e77a9d942c104a4372d28ff44c249

    SHA512

    fbf1ff0c9abb8f3fb909d24f55c1916f031ffa6c713b753e1010819843950c806b1fdfc199f791d0c446b8506185b4e819ea06e32974002783f68d40e333dbb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0e1477c09f0e58d3edd0898b0e65cca

    SHA1

    22ba56357b82144cfc5c1f8b7cb6d4ca28fb7b5f

    SHA256

    43bac2f06ec6faa13c0d2218c1b03d7ea9edde4243605a23ca6ee2511e3717e3

    SHA512

    9ebe0f1921c2504b5a7e8523c1b8882128092dfdf1f432c37bea96b61d5aa79128adb79076a775703596e95cc883dca7b71167c0181ce1181febc5bf0d002f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e360829678d83fad36379214b6e4c15a

    SHA1

    e40f72d1e84a98dd06fdec43e8da4ca608ad6195

    SHA256

    f850512ed88b37510c16add721a6af0413f06967a971deb71678cda8cffe6e1c

    SHA512

    87196867543962763dd784c2a91c9ce466cbaf80fcb16d8a740ecb39039d7a89c6ac94d5f5707830ef216fbc45460e7452c874a823b42a6d99a0390848f940d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a358ef8594fc7a15cca5a572378b000c

    SHA1

    e67c4856ee582944a6fa1868b1c14d6ce70b8298

    SHA256

    5ab751ea9543cf4a5d9ad53dbf284a4dc4f4a4b17d4b868e48a1920b1e2f8e3a

    SHA512

    fd4db09ed44b704d041936129be3c8563c1da7eedfcbc4f5bd2fa35c3fb17edf8a08a0f870439d22f5ed79b751ec3f5c8f7ac9a65fdd157779d6d787c6d0ada9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dba35596e5e4554a8ebf4033ecff417f

    SHA1

    cf1e717f29a7d8a7b6c2f4f1b140299bc5811c3a

    SHA256

    8eb8cd6359b592e3bda4b5ec2bd1945348ec1467d83c74a492f571583f9646a5

    SHA512

    d64e0396aafae999fa5c97dd815f27e6e58aad64f39cba23f0b6613b49bb150f7ad73201c87e51a920b5ab638f41bcea102e572678b6272ce72536a173a483df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1d60c9ae95162e3ed95aa0bc6276ff2

    SHA1

    29217e30af474af83c141b1e1f0cba22fe45ac86

    SHA256

    2b83da0507f7ffb04c7cc812a0f445771c24cfd69109747292c5d68411f1e017

    SHA512

    d1f2d3c9f10b2a14922e647565ae8228922d080898ce5fb866640857aa832f66c266bdf9721aeaf9dbb1ab326ab833dc8c09fddbea38f570e3f88d91f9515c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df3fcf669a9a682fdf9331631cb846bc

    SHA1

    aca900b92257569cb36a54339e4dd5c2b58e7498

    SHA256

    74b703fc71ba3fcf19a45f3b61b1e229cfbdb9e6cf337051557102dc5834e293

    SHA512

    7c6ef4431918367c3e1ec4dde74d45fb9a590d12992c663ca577affad2ddb3dc800ec86abf424fc4da570d2b641dd38ecd2735c04b2588666667afb2700756ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bda5bb79089382e4518737283a9298b

    SHA1

    2808f3ee9fb1b169fdb78ad5e1321e06125ccb5d

    SHA256

    03e959391e6f398f841ce088dc1f888e65a1f1b862b0229394bc241405ce0c54

    SHA512

    84e4a8b77055b0694e6af9bab837c382af54f05700275ac378136efe9d394264c03f98edd7d6c02e29691f7683e48e08484290a416bb3764aac7779ed255e0d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e503ad0fdf499ec9ffb2c6fcbbb80f83

    SHA1

    deb7d7b9c01008c20950edf45bc68801ed5cea9b

    SHA256

    22d2229017bf91cb72c19580d9d643abd1784097db731b64595dbb4109598986

    SHA512

    45dba95fd14d4ceb5ad18b0190c31ce5dd4a1b1415b6ab776cc251e9dac226a0caae92dda3b68281a70f47fee9b142d2a9a2fd03150bb08bb3c893e8bd9d0791

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2db466b71d041124694e184fcc49f4d

    SHA1

    b98986153d46211037bf7de855ec8d051ca0d6ff

    SHA256

    2c1066b0ccb7ecb3e0fe09ad629d5f9998df740eacef8f1f313f916d091affd9

    SHA512

    d6d9d55f0d19142d54dd88baeaba3355e19c6902fce70d3643c985e415f09aa08d515a8713088232b7d29ba838faeae10dec0c3220a0fadb23282c72a2aad294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fe0166627f91e2d66859a7e602f7c52

    SHA1

    abc15b61db9fa8392d577a720d31c4255edd259e

    SHA256

    b2e4e8db8d648c20878d87937845f558638c8699f38305b21702e94ddced8cf9

    SHA512

    843900255bf6d27ab882dce70410bc9e58871f2e70ff252f249f0cfeb51f3662f04242da7a36f92c3ebf91a29b57a032b5d275cfea454b71a9035a4faaca6dd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd0f0094590485d8ec254e01ea903a22

    SHA1

    6dd20899062baed2fbeac0bcee09afaeea095081

    SHA256

    24e054e1911c9a8bfc27d68e0823c83decd89c91bd17ad67534ae7118e890e40

    SHA512

    36354bd652886edb92e14f83ce58f1431b55fb3cae62a835f3c0bf0c6a7812bc779eac0dc3396600e3136622e376b93b8f768c669eee084ff4d3133c676966f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e9167975bbfadff16c4e17962fd3c01

    SHA1

    239714be9c6b2a04ab0fba4e9b61a25af1fb1a03

    SHA256

    f06b05a621d5762eea365ab77c6786c98c22c0887f06c1c99483a00cffe8ced5

    SHA512

    268e66f7365200b48ee11b0dd77f21f339ad4e931a5484167dd78856617b1a738bd9efc6d77f8fa5752aea9df9270a32c9aff5b4ff11456714fb7fd927733a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3db3c34ef525c5cd64465ec277c31ab3

    SHA1

    26c9bd889f8f5cb2e1b8c218066aaed7c8fa3e75

    SHA256

    63126b8160adf5757dbe5937c22bdce9a6a326c436f6330dcb48176411331dda

    SHA512

    9370b2c0037967b1d61a91840a36f3a307f1a9540143d13b728cca97c67b456b438bd60091dfa5bc50a5a4ff65722fc9fc9deac2997574c8e9419bcd26638058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    315dbdde660aac771c1deefd3425f9d3

    SHA1

    b44796d7aae31c6fd46dc9999c71f3ebe5b1e8fe

    SHA256

    55161e73aa5464859e1ae26d13979a63fa25d3fef63a78ae7b0e1fcbc1704929

    SHA512

    70d9591667b03fd149d9109867daa4f14ec5b9d52f96846e10f3b4ce924f9606c04600c1ce404bd03aae3414390d8d99e918bbbf4b703d48ccfee852f8d6b6ff

  • C:\Users\Admin\AppData\Local\Temp\CabEBC8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEBDA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b