Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 14:29

General

  • Target

    3fee9ae930d61e2ef2799f163310f742_JaffaCakes118.html

  • Size

    23KB

  • MD5

    3fee9ae930d61e2ef2799f163310f742

  • SHA1

    2a84e622c1da9585d7f9313b68b7a56432239704

  • SHA256

    5855d08d381aab094c809f86eadff7a82427305c1989d0d81d2df6c7e1422eae

  • SHA512

    a5f872c154ebc886d9c241d1cfcf284dc8ec306f7c43d1062c0b6ac6cec178abf4fa1468574eeaacdee720e4be77133c403268b16a52864b3a3761296024a894

  • SSDEEP

    192:uWvIb5npWnQjxn5Q/QnQieLNnTnQOkEntAmnQTbnxnQhCnQtLwMBrqnYnQ7tn0Yd:MQ/t91jpv2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3fee9ae930d61e2ef2799f163310f742_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2476
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2476 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae5f3cd66e8ebf543d4d32196af703f3

    SHA1

    f68c8b3885ad90fc3810fdc2bf78c5b447bdf9fb

    SHA256

    9246e833593284780484504c1b9c646b29f9caa7228de3263aa17f5dd6994c56

    SHA512

    b80949c725676e7d33e776fecb9b2ee7325d688a11165774c6d8a00ea41d3c8579096c13ff24b7f4432344ec7c319866f4db5954bc669bb44a86ea9c2bfd0511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25ddf01ea0514654c387df52229e37a6

    SHA1

    a346fb67caa5d980e9c617d8d0d10db8a2d09b90

    SHA256

    0c4d16c9d3fd763af39b4fd2d0c9c6fa48535bceb2b968853fc333bad6625a43

    SHA512

    e5d0f7964f83d27f5d2ec2831c603734dad34ccbf2e32763554ef953e299533b434c05649bb8747c13ec9ba512c15437f112c4c4243f8739e33a99c63008bd3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d4c1b9b6ac3e0f0ed44851d5c800ca3

    SHA1

    0ebbbd56f9e6dc5b7a536862ad913b1ffbbaf50c

    SHA256

    67f035ad325180fa985a49f94e304970c342c3c1d344c2ddac0100b3552d7bf0

    SHA512

    b08bf0d9afbd9be3d15a6785e102054ec9c369658aa21309bda7e1d1cd902f6f247e5755614f96babb3b57f003173c42dd6051d976c48884dc9bfe16893dcba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f19ace2d2e8a95b292ab9af2649ad1e5

    SHA1

    9c722a0cf45585b024dd1dd6875bc1c414f9e305

    SHA256

    fb31e5b9a2ecf83a28619aba2604a49b46d7c659aa26ce7ec4e3fed853a88cc7

    SHA512

    ade08429a6c8a9585d4d95442495c01a5d2b9fdfc5dc512af4b43e6ff4d7118d945356745e23f2fc98f5fc518eeb295e75ee5115abc24a508488615692871678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53efb587d0365428ae8eb5065a0a79f9

    SHA1

    51584154347407e64c865d0c3148461552af5acc

    SHA256

    1b0ed8a8d56bd4843b715f3304d407d801ba3b2fc3382ec1b789e1d5110cf100

    SHA512

    7cb9e1141e0f12a5224aee08980e70862df2147138cc75aa0684397f768c54c4e2ab7f1358594b2ef2e4b399ddd779f28952e02b1ea912b165d466973544f56e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cbad25c7916f31e9b60c1ff2ebe7662

    SHA1

    e1a76a119cf775b7f8f9c17101548a6b087018e9

    SHA256

    2d015b36aa28157067808ea5d43b37632fad0cccdc6f4ee25fa5a35c7cfc8623

    SHA512

    fdc3c86f7edaf304546641af2d12bf3e36961762537f8d5a68ec9095cc057b7e14388c209bc450ee454a5b1f302911502d441b6b19f30e7da0d254282653c8e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fcd590f7a638f88c61c030af2c3ff6e

    SHA1

    f77e7054e78857bac54b407380641c1c7f28b4e2

    SHA256

    e0332bc5f385d94cf0488599be4a2d95a97b1014a2885491bab142b3694a33c0

    SHA512

    100c1bea999cd0c07737df12b6bc2c430186802cd89df337a538bf7d72abbec1e3bf838d5dc25a550a44f86c635fdd00fc98684f04319db1e388e5966a4964bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0826f05f797a4ba7cb1ccacb133bdcd5

    SHA1

    eda876113394339b587f1f56cb52c388fc9e1496

    SHA256

    47a199578c9aa09cf4eaf6fc77db1e432971397c1197af4575ce88b9d6ed5d37

    SHA512

    d54439a159bd4d0d78a10ed2daeb2e86062248a4f5a7f22e7b0ae8b4b681123014aac10d6560556b9053237f3212649aec6b56a00a6d3f73b17f58a93aa91e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac6047e001e5f26db60c0db15d37cb38

    SHA1

    2641db1c07e4a4269a68ec1a13f4a6c0fc307dad

    SHA256

    bd1a4f86b6a4f6bf724e10ad09268e7718426909d7dfb650f02c6a325399988c

    SHA512

    e9e12e4010987943ff3840b9eddf54a105990c6cb828c258261a155b7aa807c6550640e8398c4556c67a9b1cca7802260345f1dcac1ab70a81e304a4e55ff8bd

  • C:\Users\Admin\AppData\Local\Temp\Cab2C7F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D42.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a