Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 12:13

General

  • Target

    a57b1f11b79996e3cc461ecaa50b34f2_JaffaCakes118.html

  • Size

    604KB

  • MD5

    a57b1f11b79996e3cc461ecaa50b34f2

  • SHA1

    9e4d9d072cfc421181926e8e533e15b9219c5e0d

  • SHA256

    16b8702e85a3037e72e92f0db6bd8d5be9f5857ead51ec7b5888ee42bbafa9fd

  • SHA512

    82cf423f9a38a74ee0e774dbefbc6993ee6b3a6582b0acadc4cd5d5d511b17c8b17c3fec7ea80dbee4478e707e0175dd11a0522c1e879984beaf0d2887cd64e4

  • SSDEEP

    12288:B5d+X3E5d+X3Y5d+X3F5d+X3/ur15d+X3+:d+m+y+p+furZ+e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a57b1f11b79996e3cc461ecaa50b34f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads