Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 19:26

General

  • Target

    b4cf25f1464fe4734db4cb8d51cd7c69_JaffaCakes118.html

  • Size

    10KB

  • MD5

    b4cf25f1464fe4734db4cb8d51cd7c69

  • SHA1

    d5b5c3ead5ee1206616cc113fd39cdbe2d85e87b

  • SHA256

    64690a6bcacd47fd0845600013773dbd20c66b769a3941f9c3e769a716cac13b

  • SHA512

    85e362ab363e4bb6e9fe0e471d6a353bd637544d8036f3a0006f912412ceb3b93c8606893f0c6815731f18b47ec4a045785737ba6c1aaa6a15671f2484a02345

  • SSDEEP

    192:tDMyWbZ+b1RUqtdKbMv/M1KP4eNGACyk6P:twxqRfZMveNBCpM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b4cf25f1464fe4734db4cb8d51cd7c69_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads