Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 22:29

General

  • Target

    7374ba0fb4629a4aa4f09d6d8df06c61_JaffaCakes118.html

  • Size

    35KB

  • MD5

    7374ba0fb4629a4aa4f09d6d8df06c61

  • SHA1

    ce768f22c3339c6fb690f916b185090851e07b8e

  • SHA256

    11f7c7c206acf5c3101505e33da132badff1ef90fa2e1906c9b90479846b078f

  • SHA512

    4091b633759e07fea2ef4b5e6b6a31ff78bdfeaa61a6829f636d64f38278a4907c9895d21b49fbe96b0637bf154a60d4eeaf51877fa5373d69463db7bbf9517a

  • SSDEEP

    192:uWkS6jGakhsfLqb5nX3yGeh7PU3NaHbunQjxn5Q/h+nQieFhNnzs8nQOkEntDIWn:yQ/d0itEJi3VT6jHdzPl4oa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7374ba0fb4629a4aa4f09d6d8df06c61_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    132f086a70ee94e4e40955d564079400

    SHA1

    b5ea99493517486f57342ed6d0cc62328c540646

    SHA256

    f3569ce5aa8c2964a3c2e2d537598580288b2e866e45aaed055296e7d57f21a9

    SHA512

    9065d3ae971fa2a740c756473c4f73b8b7c6175179aa8bc2f5eb3053eefac2908e6490f723d28b5a8a92fc3552cdd3bc8d9e7201abe8df242759bfd6b3d2cd5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf4af8b294ea7480559bef37a342177

    SHA1

    5e7462b54d4abbb02aea320b18258b9c9c7cd35b

    SHA256

    587331dca008768347291572a2ef946e8e90289d90b18dee9624c8900ea2c3d2

    SHA512

    fd77c1b04daac06f54b9260042206b60e2b2d65208e9a3ad96a3b46b48493e5153abd79e49b414e1febfd5430c742dbb8ac37b41a9a30717591366818bfaec2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bf05140d61253a63faebe29d61e267a

    SHA1

    5892be73fdee138afe1b229b232d9ed238570303

    SHA256

    81ec9c14363b57d35951594659934509cac94cccc76e648d663ef16b94e3905b

    SHA512

    4af1e9415fbd766fbd9488c7167a68a0280cde4ca2bf598c94ce4dc03630a0b1f38bddabb92dc4309d3edea6a5514b9c0f3cd627f8567031fc2f7ee64fe5c00e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcce4d671ec239767a621a4ae0862627

    SHA1

    524b9b6c9b7e7c13c83e9d3b0f92478f8b045604

    SHA256

    05f0f4edaa910317c0747041a14003fd386c923ef177706479cffed2aec79617

    SHA512

    fd858bd312f7b2c87bcc949069a7fcc8d1e12771d3ca6a3d75d590ab717dddde45951762668931dbe95d865f4a41ed88c8365d8a0403de029d1b593ca9263e16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efe212bf54007cb098dc3c5328683e3e

    SHA1

    0af6ef2df7dad4866215bcdbf33c7401b9901f79

    SHA256

    251c2725e70ff7b44f4ba32633faba2221ada9233e71f6dd85e29e3fd60968a2

    SHA512

    5784e5dc2792ffba2540eb872e336ce6d29913487dac4eadc1463073934c35153b797cbdc4dcc744ec30cd505423b6a35c030012de5e1ff390f8c85fa4b61476

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b67c05d4fefe039bac7e2dcd5f356158

    SHA1

    79c645525a69ad25da83a330994248c506098c83

    SHA256

    050d1da060ca9a3377d2aa4557a116b4b481af38af03a4f4825a8285a2bb18c7

    SHA512

    4d860aad926d596babed5713b7ac107a20126753aa0db0d130aee4189ee75216671bb430220d2459ddbf940fcda2184d529f8b82680e1ef1e75e00e613fff005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5182ea34d471e1a560d405cccaa29717

    SHA1

    89a3d9715657b3548f04d47b7436b103061c6957

    SHA256

    e78e01309467996c071c52eebe6e6c0511656d2aa81dd9e79bf5f35fb485365c

    SHA512

    0a3165c34bbf25cb481d8fa0633bb775720be7c339405f34df0fbb9722a17212e8aae43af35389acbdd57ffa7afb06e3717fe84dac498b8eb1af8e73f5215202

  • C:\Users\Admin\AppData\Local\Temp\CabA5E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB40.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a