Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 19:02

General

  • Target

    81905ecb686339d9debb2121567be54e_JaffaCakes118.html

  • Size

    26KB

  • MD5

    81905ecb686339d9debb2121567be54e

  • SHA1

    07457b8c3d0461dbc3e118c7add3006fb45e09e0

  • SHA256

    1055c932e9de8a934d95752548988d703c46da9d0619b7172ac1193ab3eff09f

  • SHA512

    8b447b173d6884b6fd5981b0a564f9c06b8188a1ae59865bccf7a1bb4a1fb7391ce30edc590ce545b3277c286669dfa37a58b2020f1076e59442603a83743f4b

  • SSDEEP

    192:uqazH4b5napknQjxn5Q/lnQieQNnznQOkEntXjnQTbnBnQKCJVevo7NtDFo+NzQz:ncpQ/qygcYuqT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\81905ecb686339d9debb2121567be54e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a569ad017c53d011567696769f67b5d4

    SHA1

    e1e1135b1cf624436fdd40eccf35942711bf90f3

    SHA256

    49fb2426920c356f17d7b9e2849483efef79c5a3672f9969704fde9e82e87e39

    SHA512

    37757da34529639dc94e11ba97a6355f8b38d2a5678965ab06a6e6d0407d515b07bb16e5a2e5a16727b931933faa6b66fa369b23e2d16ed8db085e8e78b6d659

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    669bc494de486a892fd8a5983e5c2fa1

    SHA1

    d5d50b30720beca8bf9a763ed5e1fafb8151ac2a

    SHA256

    c8b2ca8b2ac3824200e1f34b617864a97c353da68f90b86b5c754fff0e7c61c4

    SHA512

    147982d0022e5958cec54771339bd6ce6e980af54f2defd80b26a96d6b51dde32a60b41d7214b3fd2c702e87f1c2544cff0a9bad3acaba47755573ccfbe23d32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1ef947da27980387ac6643f21c31f59

    SHA1

    782aa9dffc41bda07814a5de43e65ef5f4c5909c

    SHA256

    a144585d75044c0c993bea71510adfba447967d30e0bcb0cd29ce675c570b574

    SHA512

    6b2f00b94e21119439d1674def78a6076cf020489f4c47b9b178da55003102c1631da37bde08fab88755c53bf52769ecf148274262aa9a04affb0c8cb089703d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42220816fa757b864101c48296ea653f

    SHA1

    07ab8f7e9f7e12a4227496c495a19d030d4beb60

    SHA256

    f769ae5a79a4d4e479b711ece3aa85b3c90c26420560acb54826efa88ba82c90

    SHA512

    fb98a6cbd15a105747f4d94b39583f8186a4dfddafdd6495b1adfbff439ce6cbabc9492a8864240564de4254af59ab80042c4c6217e9cc5b0a9ed30cbeccaad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    075fb972f849404d332eb8885453d838

    SHA1

    80bb65c1b7c348121b44965b75f19e2c920fdee0

    SHA256

    fc9a0424e841b6e181e0159612c7d0c8f748f00b1afa6e197e1df88da4697c2b

    SHA512

    38f4ae3648b2777432c0c064f0d1e7c9765c61bc5777e98b742c3db02b3a6d6a17601c6ebb21c4042bfd251034238446992df877d90f8844162bf5100e62c9cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c501377b4cab7d8be996574cd50473c

    SHA1

    4692bb314d882066a3175f422b1487ad148d12fd

    SHA256

    b94c862835ac2280d76b3d3f71103b000ce093fb02eccf3c221ddba7d2969fbc

    SHA512

    3b770c64f11ccbe08baf956ffe7b9eacc4bcdbcdbd23cf924e511f99cdd68f60d0ac3cde02704de44979c54961b306a38264fa8594214b0185e635ca788ac725

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b46516ccf60e2d19bc9ec2183a47486c

    SHA1

    1cb072bb6eb1061e47a94f8c22e349dd20206382

    SHA256

    55578e95e9b33f1578ad8b322e39563a99bf21a8a748e6b862d077cd25862144

    SHA512

    3bc3443e7025dcbd92eaa5ab73bb73760535700dd0a20ac79ab4dcb56b822792c32590889c98ae677b2568779a9fa88851394faadf06810a1d5363ce7a4cb149

  • C:\Users\Admin\AppData\Local\Temp\Cab7B1B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7C0C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b