Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 14:23

General

  • Target

    75c5bb3b35f1a17b73532f5a65c902c8_JaffaCakes118.html

  • Size

    27KB

  • MD5

    75c5bb3b35f1a17b73532f5a65c902c8

  • SHA1

    ea7676f92107b713b5abfdc3dc130e07ecaf6595

  • SHA256

    b90bc048c283f409354b11d7fc73e6f81e1cfcdadeba19d201bbcc9939e87996

  • SHA512

    9d25e23f7aa2847a3475bd9d6b84750a4ccc4a35c522d59f4bdb89ec9a669e391c6adf3f228139bcb67fd8573309dc1ed28e6bde7d079434ce80c073758d9892

  • SSDEEP

    192:uwfQb5nZ2nQjxn5Q/YnQiezNnQnQOkEntgGnQTbnZnQ9e/zm60fBjQl7MBTqnYnT:AQ/imVEB6SteO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75c5bb3b35f1a17b73532f5a65c902c8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    480a666f81e2414ea5168dd308280341

    SHA1

    feed0fee519c9204684f6d3a6f8df8889ec4eab7

    SHA256

    d523f24c0a282ea0604c6eb349b5815c954c414b9e2eed6dc86c666c0d292f15

    SHA512

    e7bbef8cee541e4e84a0b240d798182232a9159fc009edb3d3e32512ff0a7bb7cc7e06d3059e9b8aefd98e2f84b928ca75de836c26d463987918f0cf76f40823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c978eeabb50f8b1f96ee274645b8cf8

    SHA1

    a2d5dfa8bd393b7b8e457737c5e7eeae1d51593e

    SHA256

    218d032105a404cf8221a3ad8d760c2ca0f16d0921e39be33996502e781147c3

    SHA512

    eedf5add710c5e020ac56537a3404ab41e89f8c1af56dfea2b77a3e553b7c4bbfd4bf44db4d08069a3309fd64acfbf34974564fbfb0d0858bb3942e7be6e039c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e62780f823d178780d95daf4cbb3829c

    SHA1

    1b67126300298f6926f95df1a2f8b242e0addb65

    SHA256

    ff800abdb322b86f96e27b137df6190ea49b4725547a00a67f6e75cf36e89830

    SHA512

    f2554d2ec64efed9a548ac7e2e9f0304f39e7e862b338bec386a7d58947fc86664aaf45009149fda50218f1030dacbb275088575c859b27a3caee6eb0361a8e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80d639fc82049bdc47e93a016301c129

    SHA1

    ac5d509928185333bdaafafbcd139f469c607569

    SHA256

    101f5ecf4e1e25545e199034cbed9c8c4c5d386a4c681a3e28dcdd97b6d24897

    SHA512

    8615637f4f282daa1e63a35572d312e4581d10f1e8c0bef1863ac4a050b8c49aa5348e41f2405dbb07b95604a015255e8f82cc8d42c3bb7ebbe16ab3b7d437e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9826044ec71c20995ca895853fbada2

    SHA1

    4b9914721251c5724ca9427267c5f9aedcd91e2d

    SHA256

    c2fd65f13662701a9e310c8cd44e63f328b233f9f1d66072ce9c45f8cb9dfd0c

    SHA512

    e5caeacaf01f30338629d76f417d0d501ecb01b9ff40e073fc8ec9ef9b60d250f1ba95d7d33c6f1733e3c04e86a50ba6a01919bce1a35834d22ab763e67dbb9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d90522b35582c7e10ac904f3d647b0a

    SHA1

    813f787ec2033f3348c7f867b5fe842775eecfda

    SHA256

    5795c3a79f73b5b2c84e87da632d60e291de856e093590ece31fce88684e5b78

    SHA512

    673822acf0e02d3860c80d6e3f41a8400465adcb5d930c6843d6abf9c00cdb32e411629df0dfd8fb93b5b17133077c02498145c538964cb4c3ab554dc44485be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e21cc7dfcee911a40c2f89fad10b15d

    SHA1

    056cd84d8878ad73bafcd53624697752e9b013b0

    SHA256

    7233ad7569ed7a1c3bb084e36f17c70aa11fd522411fcf21d0871721bcfee12e

    SHA512

    73134441c8b3156a9d63f4ddc74141e785392cc42242c35e915d44717eb1952e86d04640c38f618a5a73f6d061de6cc061c5a56844442d25716e93d5c5a97982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9cbf976f30c2af2c6368e3f6a9229db

    SHA1

    ab0d40fff27af097e90c67918a82e2f868fbe9ab

    SHA256

    aafe24c298428e0e56c3bf47853a4d01042dc7a8560ab0bfb0567454195af1d4

    SHA512

    8f6b99ff033c77dfd6564f195462e04d8ba60ec42b336f6137b3ffa8699d91eeb861d9379256dd081a040375fd61967798381aa19c78436005dae05740cb6df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89757a4665fd02bcbbf15ac8a04390ff

    SHA1

    05542fa6eb3ca9b8fbe1242180a82bddc47eaea0

    SHA256

    fa139dd567d2caec44554a1dae808ab75b5c51a088c2a61f7fa5a349c9bda367

    SHA512

    a5933d8c397e97fba29b2803cc9c5eba4fdc38d4f68a72c7556842415cb64943907347d4ce98dcf6b9624ab5c235fe29d48b62aad4b8a86818e48555f55035f1

  • C:\Users\Admin\AppData\Local\Temp\Cab189F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar19A2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a