Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 20:27

General

  • Target

    64a736e14a1c018f5db18abfdba3e590_JaffaCakes118.html

  • Size

    13KB

  • MD5

    64a736e14a1c018f5db18abfdba3e590

  • SHA1

    c61faea8d059aa1461e75ec81169b799691c04ea

  • SHA256

    040add15d6ecd1a33d0e95e3a5d664220bb89563ea087f9e85610b899f780da3

  • SHA512

    b84482e686d6a7a97286559b94c394b654e74067a04705885a5a5db9fd369954f0669a12a2612a111c2f978e861e8545441af48cbec62d39ce6385d8fe0b4160

  • SSDEEP

    384:QlJsIX05xpbvDEdSNW1fVZS5LljG23vw9khUXulQTfCd6s0NfnKQG2O9LQXmN:8JtIxpb2SNgUdlqmAXmN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64a736e14a1c018f5db18abfdba3e590_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5290e6ce5626fc89af627d4ea8978594

    SHA1

    ffe5f3de5be7ec877fc5f254a98ddc6994a8334c

    SHA256

    c98e97a5b94a9912c050cbec92dfc242ae5f32346422c7313de5476fe5650ba6

    SHA512

    8ff36e9e441c3be9849bcdce7dce4cd4defc1f2ff15fef5d249c39a3d3cc0f8a91a08841120302f7fd77c2abdc336d5138ac2c4f655bf5bfe95259b533822e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38ccadc175c059a1383e9c2fc0fcd587

    SHA1

    d390327368013be6d6dde78010805f9a2daf2d9a

    SHA256

    96b663313b0cd16587c66e45cba5a24b2e4be07ab0bec66dd71bb42dc91c37d4

    SHA512

    8e7a7e10e2cbf84b815f3519deb85fb6b8e290b5f733a0dfbb9eb8623e927339a7bdba54717f256b41d2b36b3bfc0bef0ec31ab037b48996aa9c21d0f2e4a2d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5739b0042120217907237dc707024ae9

    SHA1

    1f2e31238ed49af4c8fcaaa2ad0d6a852e3acf9f

    SHA256

    cf1b2361d3c28439b731a664a4dd17395f1a7003926407f1dd74e1f32804eda1

    SHA512

    f8cee6a3803b5a2ae89f157faf90f92fbbd593ecd98556381e46bfd92132f5d373c0b69de24cef7b12bc192251c4030eac21934e13277de7f6cca88e7d102c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761857a732c07c71f7bae6231e4e35a2

    SHA1

    1f53cc02e394c6854fa1efe2b260c1f19a8a30ef

    SHA256

    9e5bece7ba94bf8891a9b4b82e46ff8ef5d39ca8c38fbc9ec7ac1849f4632883

    SHA512

    8feb296823f748fe1cf1bb5f972457945d309c2627c3f4edc794b3604be4d4fd5b7dcaeb2e0edc15add8f114ed136f6260bf91295099c6d72f58b19e8ebdb657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6972eed8f8c1e163b749683307f46698

    SHA1

    67c8daf4f5bb7b654eda89404f03594dd2321730

    SHA256

    3996f414c8e8799af09ae64c97b10dfe28a235acb2f775f5a52d9107cf982d3e

    SHA512

    ede2c984a5e8ce58d35ae346d70291a4cdf2b14cdf61ed17ca819121b980430b27edb4d729c76da74fd50be0dbe8d1e117c068261142214500ddfb38036fe1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04329331b9d6e46c6db070a2d8f1b84e

    SHA1

    dfff13465943d7e066c027ce6e0784a762effb03

    SHA256

    7f98d4891dcff2174819248b27deaa2dab225999dfaf1a1e3a8d7521624314f2

    SHA512

    d122b68f5484a7ea8a87756d52dafae987173b376ee0bc496f545f3e50c89c6faf696109e7e83fdce54302050c08c6e1803cf9609b4b20732d2234c975569347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27633e5684f01b40399c8e5fba3357d9

    SHA1

    6c24f70e8ae926f0dad5755c3800ce00988aef4f

    SHA256

    55907c6faa242499e214dc31c37d451a7f3f582b2da8f626328e7928c2047d5b

    SHA512

    d1cf22f2283b36f1cd61374b6d7b07fce7d8e68629129902559e43b3210985741b964aa8765f51fb8662cceb7c4c3444de188db3eafe8b4954fabd2086a98fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41e8f2fb9f69a6bc995a2c55c693db22

    SHA1

    69a553ebd9fa17a8671cb52086947a3a61afd94a

    SHA256

    8a495c1c8294a3b4326bed6dcc60d561eabdca74cfd72fe61342c5580c1e90ad

    SHA512

    0b480990e1bb7ad4fd54e0f2762b2cc94fba8d74f8102871d823378cbd772e41488fa3defe51f117fd4a80bd473a329c205815e54851126002ab444925068bfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1e91386613945da534970f834b89768

    SHA1

    d30482bf5a48ef1cdc018c57597991e94c9f736d

    SHA256

    9adc9a4e39b59cc2419b81269137a04086fef3322df61fbac52f44001102024c

    SHA512

    8a7d22c7e0ad251fa08beab086966ad43278f13fc343c4cfa12a3f65cf14c33834f43af2f1e9329f0b0782aee065a264008644454f96540c6d3778b6d1bfd0d3

  • C:\Users\Admin\AppData\Local\Temp\Cab1660.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar16C1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a