Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 06:59

General

  • Target

    90e896503e0f4940080f236b2bb19af4_JaffaCakes118.html

  • Size

    29KB

  • MD5

    90e896503e0f4940080f236b2bb19af4

  • SHA1

    36e305b2c4b98f2f2334e0dead61d46c5d1929bf

  • SHA256

    5d707a171b193f31d543f29851795515bd121b5c3b2d9d539b5b5c41e522b66a

  • SHA512

    872755c006466c88ebcfff325b2260a258ab07d4a4e917ee7809b5a277b325b87dc0ff7897037c208d79b1283b253f0989c17e088bc5e20da295ff29ce11f284

  • SSDEEP

    192:uWnab5nZfnQjxn5Q/knQienNn/nQOkEntQunQTbn9nQ9MCNAABuz0EA3KSmdHsGz:HQ/zXVXl290e8CGO5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\90e896503e0f4940080f236b2bb19af4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be1e86d7fd156f444a471f5cce5d9dac

    SHA1

    4deb9e7d80967077ce84df5e6fadc8d92ee37b61

    SHA256

    d59ee3ca06a68a0996eba5efa10a672394cbf3a7f99d93604f103c99927d63c6

    SHA512

    bee8bc4981a9df90b2ad798d1d8e6000aad267ffe40ac199a549fcbf299f54f81d46f884dec8afe146a880824a604627a1e03c3f65fc23fcc48f0293a54617aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78337bc6885205ac23f162bc4972eacc

    SHA1

    be7b7927455785161fcf387c24901ddfea5a3969

    SHA256

    f98dff3542cbffa21ddcc28850836e82ba195722fa6f03216d3d96c75eaa047a

    SHA512

    86c501313772918ee8358c0e802d755881444e33f59edbf77703b292ce8042137e96dd6c20eb049cd15a2758acc6c71ec48aab982f8bdcb8320dc4e3452d0e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dec230235158ee63ed84bd6fc3d02af5

    SHA1

    a1cf41ad20465245d317b23e3f5115ad73d79da0

    SHA256

    1a733d891223544271dc8b252e9299fded58cddd99a854c012d3fe204abd55de

    SHA512

    7452b4346dc11c5504859b07773fd078c67461f06035d42340b99e4b9d071534bb03b0e6a56349afc4c39340c11fe9b69b6d8c4d7bd97e926b0d5c09e948be16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    462659f18de6b701afe94b892205deb3

    SHA1

    7d044c8c61f8cca12fff54a1e39b400c4e80595d

    SHA256

    bafa5f8b33b3ddb4f7a57904148131fd279156c049670fe860d78ac0ed54320d

    SHA512

    7de5becdcd23785f62698d5f78f86c078b0707b1b35bc73bbe750704260796b408fc51d2c45e3ba777f22030dc49127c29f6ed2b81209268804eb9bd9e47cc1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2750644328fba6953d33c6d36a0df594

    SHA1

    99e74a3a56e0bfc268ab9b0df97d08e7991f898d

    SHA256

    172be5a7f7386f8fa67a24e6a7a683189f6c81f67cf27d7531f418d3a7cd734f

    SHA512

    22594c44071a4926e4887306d5885f5453c631a9df275b390fc5110de25c093fbb19354526c40e7b816c7408eb8a64f44d85f06beca9f06d6fdffbd70d3a5952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c47c25577befc549a97f27c454190490

    SHA1

    8cf847f55d24e1cd07f8131b57d73fa9a8b768d3

    SHA256

    af8188b25f4636ac6c8b447f091d0fbc880ebe3fd416564f1e1d4a631a12420e

    SHA512

    bdef4d8512071dc987079f8d99c9e001db78b40f1e30199d469f6ac91e4e831ac9ac79fbe0bf6fdc5ec280efb5b70b2cde820d079d96c169c268a1b38eebb75d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9205fd72a9897a0e64e68e38c308c25

    SHA1

    5c21b9601fa69ad62b13dc0302ddeaca56fba0fa

    SHA256

    b3e3b689149eadbe631a44f0e0a6ea94ab66f912fd340f4a80c2140519a8debc

    SHA512

    44138a5ce84b5d66b4bdabb0cb299b2e4511f6ba2afccede6229859b2879513599fb68a788ab632646dca46ff38a18c3e57ee3d65e3dea159eb060683df14a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69c4a6eb4e48d01d978f3cd2888b284c

    SHA1

    37a7582c0d96c3727ef021c9604ef5803c41a489

    SHA256

    00b21a38c7e45d5e81d3489bf36c56f40465dd34dd017690751c2aa079b695ad

    SHA512

    8064f0ce0d890e1019a8852a28b82fddb8e76b7a0dbd50ccd7111a3f63c8b05496596b49573cda391aa14c5820e20542f7323f86c5f9ffb6e8299a57af6345ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    095b8fae1a2d1a03f8500f36e00d880e

    SHA1

    dc51ca7a9603c575032f48b4beb3c3849534ddf4

    SHA256

    72d2f50aae4d6ae3d0cad5809536b150251840b3e170e56c6ac64eb53e75fbb1

    SHA512

    2f82db7ae86f2b28e1d54f4a5c752089f317205e540ffd18481ef4bd5201e6ec34f965742c06ec924d10f96152e71610b3eb76f17a08d414e9e0d92b28cfb041

  • C:\Users\Admin\AppData\Local\Temp\Cab25BB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar263F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b