Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 00:32

General

  • Target

    547b2bff6250f6aa14385a582c95fe5b_JaffaCakes118.html

  • Size

    30KB

  • MD5

    547b2bff6250f6aa14385a582c95fe5b

  • SHA1

    ac7fabc53e5a8f9ea5cf36263a47c3bd4d9d54d4

  • SHA256

    a01c5c6381550d2f29d41360d742ec246f02f6dad002b5e1f8c25244f8465180

  • SHA512

    bf159d82bd9e74ca877ca61d026f437464f7cf20ab9e1796734f343dfbda38c4e1c36c029f5d9ebc949cfdacc4a387e51219e58442329bfc28acecca5e18a503

  • SSDEEP

    192:uwfsb5neynQjxn5Q/cnQienNn1nQOkEntwOnQTbnNnQmS+xtX2Iov2Mh1C6KcdRx:lQ/2txtX2PX6KCVXq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\547b2bff6250f6aa14385a582c95fe5b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    830704ced723cad166f87c309fe14525

    SHA1

    0c752cf51d3941a3a4096c096afce310c322a767

    SHA256

    a4bd1a298a0cf47e93e197a05907d2145ea89397b6ff298d295e324330b65ae3

    SHA512

    194bfd543e36248c273e97f04a9c69a43da8d1cd934a1b33f93d4ebc0a2f0ca469ba16a0d9a080af9f1aa84584bb435af356c6af3f69910a87272646450dbdb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    670a9a8978aa766b2f3d8c32bd2d1931

    SHA1

    4789c9fc0bec716258b734003084ec57009ae6e7

    SHA256

    db2ade78de5248205822d50177935d0aa518ea35d72092cd442c12453c180018

    SHA512

    516fc8f21320c3c00b876c75e911835c80555f4e32f223a764a9ab58e34ee61347d16e32e8ed3a1f932ff95d2fa4c531b2419988d7ef700ef089b5394b613f7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7b86083e617b9e5efa2e7e25c0595c5

    SHA1

    d541d8fe0aa2c10f6ad335ba8bc769435759d71b

    SHA256

    8268403c30e79bb3e8f05349f38ed797dba6c83e0610057015944decae6c38dd

    SHA512

    081d105c580c70ac37113f2c9893a89232e43298ecc1655f12aa1f020cd74e057d7d35fe0999f06d049c330bf5c06675e54a9e1ac975c4d56b44f55564db8fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97801e2c5a140050b6cf0fb7067b1a87

    SHA1

    e919c88365b5dc96443e8efa27daf062b6541169

    SHA256

    ab546d1115da50a4fa0d64f32518c0ebd38db6798f776cc68d73470653fff68e

    SHA512

    eac713c3498e374bbe5aeea605a2751e407c21e790ccce2574e71cb5a878afc664ce07648dd823218e1d934e13e00928721d0225e44cf31e0f0ff71a38a68344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fbb99485e28034a162161a8c0099da6

    SHA1

    c6a1188d535a1c03019a1bb12e3be61f640175c0

    SHA256

    df87dde4d2e9472d89b3203142e43f4e60dad17e1dbcf0e3f31bfc1460d7e98d

    SHA512

    bc454e634c12259984b1bdd7dedce8c197d348ef9099afe75d742e53d8f0f4298d12b0e0d21c8ff4154c9517e1b7c3e518eacf614aecbf273462fc0ae403c3f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34f0bb08a2947028c846870078775088

    SHA1

    a44ab510217440201b58c72d1c05570babfaa197

    SHA256

    9b467c9a0b4063410bac9ef2af99a7870959da6724f900f9f988ce657490dd29

    SHA512

    fb40f370dfcba3cf688b43dbe2f1dbbf89584fba8a2b21626ea620767d6c2b5e0bfe5d198726b26dd25a29c425ad85d8db4401eb99eb599a8f6debbf7ea74319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d57f90288cbe189d05e2fb5bddf698c

    SHA1

    7f598c5d6dcf6adc8f487141fd5c48ef0ae7c832

    SHA256

    b447b96f4e9476eee4dc08cb1d773ff678601e90b2f6d83dabca3fd851caea63

    SHA512

    be15e70b5f1e94038b071a3e0f17a9cf112dcaa2ca852bf5050339993d7594ebc5a8152e5e50264f61100ba7497b4a773b0611eb428a64b93922b5ac9194ebc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c97d589c7788c50cb0b094d50a9923a

    SHA1

    ef212fa76a7656029293af15818b073487ef2b3f

    SHA256

    1e9f1ece46439610253663b44fcbd43ded3bf122fe7963ea8169cbcf6390ddb1

    SHA512

    f9f9eb23e2b2686934cc05a6df4dd8f0e439df2c7620f98fb1e18ea28d150b476aff50ce4d48964b627e0fe6740089e34e39e5c3b08da45e18953f9080e054dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57032ee22fa1c8f57d2e0f018839eff3

    SHA1

    f483da64c1e1e7f7566e03ce3443611a9dd2f32b

    SHA256

    2fb33954e86be9c566df2726f6ae325c75550d95ae674fae32e0108782ebf1e8

    SHA512

    a33f76173ad9d2b0b7e3556b8d5563613b50ca25c0df4e2518a8f415ba001b03ace2d633c6499e9e1af0de4e1ec37106efae4475c397263fe5d9291ae808d9f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43672945028cc8f3c72910a538365138

    SHA1

    6933d78fa2cdfb2decfde68bd7e609df1dfb99a9

    SHA256

    58c4408529d72be91934cb1e4621f1819287b7e81f866c4031c1560a4a2d7b86

    SHA512

    35d724c5feac769ffe85b140b4695abee35253ce69363cd4d4ff6833957a73935a0eeddef11dd2c7d86e1c22d74a078b082d4a950d007eae7a7311374398bf65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d84abf9670385fed1d7813462ded9cc1

    SHA1

    c593d0c58d3595e0574a027a46b649e7aef98428

    SHA256

    ec38207420f0e7d2eec365f177c4e2175ef4993585c1626e1c4cf31f017974bb

    SHA512

    68dc6480a037fe2c866092ed889b511247d695e00e57eabe0742b5647bf13e2a10196d96988d2d358ceede95b617e5c5b4ba3c4d97007f69760d2317eb85b6ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a96617e01703d4748e06d6d9336abe35

    SHA1

    36ea296b2c1f5365e4ffb9bb7a0dc04a05a87391

    SHA256

    e37649d2249b9db385f0e5cc5fe24dcd64aae5927d51218be89bb2462c13cdcf

    SHA512

    818d67b245095aaa9f6e9d1da9d29f072e729556bfc4c943d5fd7d157639c84d572604a955726f40d3df9203ea9fc0981048377c874d03886198358b93d0b1fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd5aa7d12e1e044d3f5296fab5e53564

    SHA1

    0a466e3ee6b8059cc9a474a7942cb4eaad25b670

    SHA256

    cbcb4635a5c138d5b88470e0f66c5261cb3e3f9ef4b172f769c57259988bc49a

    SHA512

    f7ca65846720beeaa022538093ce6840082308eb2b0ba14f61dfa36d4b4000e885421a74fb1f8cb84687f7aad795095677fa34140d72f671fc1e7ac7fa3a67d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2313fb1c64c4b033ee2bfdb6a72c948d

    SHA1

    0b028365351d9532411fea83168cfcc5bccef087

    SHA256

    826afe867bc4dfc1c98e0f66c88e85d6981947e92efd4a0085acf53c55d7910a

    SHA512

    6db5736c42d05751ca14a9f72ac10569909d7acb4de1677bd2ae58302d7a8b961805044639184ccc6b27de026a645e1a2103e82d3208f0a0bf1d9829982bbc74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d63a4f0cc8148fb3d99927c7be09d315

    SHA1

    62473d770f8a38072cb767228b36d67af2020401

    SHA256

    bd88504b34590fd90b982469fd4a608f965e703cfadcfdf08b252f86ad985139

    SHA512

    2b4ada77d5a2c679e5c7a4f6df70ae29d9675f7a82e160124f18527be7e0a630f5d196b6fa56492611027e20891a2269d9fba37dc50932146cfc2ee991ed72aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    078b5d61d80e246df81b78a74b349846

    SHA1

    dd0e6f4ad1db8dcd05d49d34e420f606d5c71f8b

    SHA256

    4247ff1a52161756a7754a9c0f892249f9b490c3145a57f33f22eb44ba65c37e

    SHA512

    5bd43cedca43d9c75f2bbd69a469e0de9436d85bc7c4056b35806c45e517a24343fd43c9987cfc832acb24cbc0f842bfbb84dd406d0fc1462072db6e644c6a56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6152b6c4eb12105a847c70f21d4e4e97

    SHA1

    5a453a58f21c9cdbb2b69f2a8632410805b9af7c

    SHA256

    0b7bbc4e40cf891a392f950c51484bfb2777acc7f3bdfb0a6b9182d13dac42cf

    SHA512

    ce7898c15ce0dd5f05e6c1da448506856e335ccf46d1d1779be3232ddea80bd2271c1409b491fb7103ab84bab5409c738b98a2f62e829bd14ee0e30c2f0b400f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    039340cd94c95de6274874279299bfb5

    SHA1

    936539afb332430f42c63ed79d4ed9cfa84b63cd

    SHA256

    37588058ccacc2c385fb3a6f42b515a0b167404dc3cd6deaf700afd57a491907

    SHA512

    e8226702af34b9b2dede80f4ff51e731384098487af411ce04d8d004f2bc5661dd5fa161ded8a6a6f6cfadb2edd7d3e2d5d7cd77c7cbb7570f2480d2b76c49a9

  • C:\Users\Admin\AppData\Local\Temp\Cab6C3E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6C9E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b