Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 13:57

General

  • Target

    b3dc0e38876aa7f4419dd35b485d3e40_JaffaCakes118.html

  • Size

    36KB

  • MD5

    b3dc0e38876aa7f4419dd35b485d3e40

  • SHA1

    cc6c82aa4b22cb26f47880dd679e1aac8a692b61

  • SHA256

    5b00e529fbec294a4746f5d612f73e18c3dd5b67786e65c8aed1da9af947890c

  • SHA512

    08a39307f18535ff1376a328676dd897957b9b139e54bd1fd31241d8e689acf63aa85bbc7513a06a00f3e2aafbeac30a3079f58a5eb3acf0d61c60e435d374cd

  • SSDEEP

    768:zwx/MDTHAa88hARwZPXjE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRI:Q/XbJxNVNufSM/P8pK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b3dc0e38876aa7f4419dd35b485d3e40_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff4ca577610bced4da22355670f15917

    SHA1

    8824175965343d4b44b9ba6193edd5054f41d330

    SHA256

    38fb71ad4a95c5b409b3ef6e62906c9bbf500744b6e065766522bd52847268e3

    SHA512

    299f3cb6a185d47e8314ac0a06636a4d419eb09807c9822186520e487419c684acb4b05570784c45ba2e2ae1cd3ca071238dc2a9b9ea4a8b3d16194565fc1790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ee9fccdc8f7164d7c8080d4dfac9e1c

    SHA1

    93d332b2919807e1935ba06e63210ba0db1a5a1e

    SHA256

    99f50a7f11dfb729a03a6a167f7ae92aaface57e6ee2d53eb3425384bad93956

    SHA512

    fe22eb2df9e0e79655b43a260a79adacbb2527ca200c993a071b31038e8dc39bcd2744d5f9a7a2a4f858a751e26b61e757c24b86427e1c8757a151f6b23157de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7b606a55e41312313b966ddd8243007

    SHA1

    283414112d4e4caa02e2a109800f9d5f56793212

    SHA256

    d1e1c0217a8f4b635135b18a9014405a38f62068fff770b141d9f9d243745d3f

    SHA512

    7ce1cd33ec5583e0b9820d35c3bc2daa341bc6380ebe5cdb9ddbf8e7502128c9f73030303ffc4e52effcbb3483cbe2077e89c06033ac89d7bc1abda658a8c736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4067be69e6614b9cbe74c3a56a62dbaa

    SHA1

    4c64e55948342b2247c3efb1ecdc36336d0e4734

    SHA256

    21e92ad51ce271d164c9fc77defb66e11fd4a6c5b6efbfefaf63294e0373ffbe

    SHA512

    9269813904346ef2144b1a29e9b68bd6d53cdb029f6ecfe03be6982081df0cb5188a765fc715d3c0be78fc659fa17888cdf3d814f48662b782c667af1694b4ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b70f84618ba425057c2353e2be2dc6f1

    SHA1

    6064d5559a64040e45e2d12023734176084e112d

    SHA256

    704498b6b2b344bece1d19c4bccc5e1c5ccbd42c006e40952c6310c4a60a161a

    SHA512

    97c3ea1a9e0037c6a99d2b64e409b98f7d5de773d1f67897f13092bd78f333d3f3cf148bd32ebe348e864a9b72fea0e8d127306e1e1f05963076998c6e82d135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    42a847cff360bc66dcd5cff7426c6370

    SHA1

    74aef7bd3c6dc1b62ddb780f6fd588d7c9976ef3

    SHA256

    888cac72ef4a9d940c088616313b79b05cf41ebbb48f76f4906a7303193d9a60

    SHA512

    76ba3139a6809645b6788f4c507613081a120c6f49eb9ac3fdde4def3511b66012fff0da344e88a5db829e79c32f5565bd95b2fdd046c793aebe59a872813925

  • C:\Users\Admin\AppData\Local\Temp\Cab2E06.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E07.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar36F5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b