Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 09:19

General

  • Target

    b7dc14052120aa2a2eec6f2f3cddc76f_JaffaCakes118.html

  • Size

    27KB

  • MD5

    b7dc14052120aa2a2eec6f2f3cddc76f

  • SHA1

    0c3dceb846f6aae654910c8fa2c520654d1b6bba

  • SHA256

    f93cb035da8890248642a6a8409164f1cc13cd27296d0885a8ca43f4d5550fea

  • SHA512

    766798a0968c30bb8549c58a59ec1c489280577105a6110797e766eca28271785a233b7f65401d4c77d78202e5181684ddfab08c658e84f303d9e2d7fc2893bd

  • SSDEEP

    192:uw/Ib5nCGnQjxn5Q/ZnQiekNnDnQOkEntnvnQTbnhnQ9e2sm60BECQl7MBEqnYnF:bQ/RHUmEVSmZ1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7dc14052120aa2a2eec6f2f3cddc76f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22e9c1729a2b4439726c9e29b32246da

    SHA1

    f1106f9c2b75b466cbc7aa489c3d2436fc3df793

    SHA256

    505d5d4c2365280ad369f5d66e04ac59fbaccb77569086d27acd7d847ff124f6

    SHA512

    e881d67181f1ccb83151fd7e2c8c57f713a1b8dc15f154dabf4ab1e6990214d804cc53363f7d059dda057b497da31e4f295fcc530dd3b6ba5f87f7afbe32dec0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6e0296b1546be5e1add5f15819238f1

    SHA1

    e6a00725faff1b74976c4eef19fd381363bf6798

    SHA256

    f567c0a516290646a19fb0d955333a32d9b8a6076ab96d83de14bfcd2d80772d

    SHA512

    3ce1dd5c3a31a501d83c249e93a6c504bcd40d3aa3d19c5ba9e6e6a15a49ac6ee08782c785107c3548ce5127efb6d937d26875a9413e59ee71517b0addb74314

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7beffc956b81303e34b33f337ac819e7

    SHA1

    8ac490e75ad05094df4d34c6d32c82c837c188eb

    SHA256

    eb9d989134109e09aa8a50fb57c3d1d12c87a1d96b8ad364ec1cc232cd2e0767

    SHA512

    d79334a62ea0ab1e7227a81e722733449511be2edfaacc204c472789d57d03edb2df6e0b189eb75dd60b8f156f9da0c7ea40383d505eccfe7fd939d93a05849c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    971e0230eddaab1aaed891674087a564

    SHA1

    1813269fb6b79465d8d1b90b22de890b97c9af12

    SHA256

    114cae002639a9689620abea3647d6b62067434e834f4bdaa91eddceb95ec124

    SHA512

    bd80b886c47a7a2fe26ee1908bd7a638bc165f21d3149b984f31afeaffd6a363327511f9127a2bc05eb256e56f9ab13e546e1fd5a333bcdebf80cbc1c4f9ae40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f326a68c5cf40b94820a7567bcb5eeb

    SHA1

    ea4135aa08cf03384312cbca0dc6568c692c50f3

    SHA256

    48a549aff20362223536a411ee86ee976a66cee2cc6e558afc0064a36dd6944c

    SHA512

    eaae9c77e608b3bf97338400761931361c124be0e95f5841279a9605cae1c5ed1cbf3471694b9dfe043dd6b17904e6e9a95f066739ed013731ababa638ffb246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93b0b16949e42b0d7e11198b7db4b884

    SHA1

    f513bf601ac1324541727e91744ed6de84e907be

    SHA256

    c8bb6a954a21ebe492bfcff2b7c12796db65ef17d11661a361ad81c618fa2af9

    SHA512

    fc617498204b7a0a7157da32b279dbabfcf9384512f39b5a2e4f0fe972cabc2150c7db24dd05eca1637a5b0a45cfaeefa47439f95769f628dd9e24131def565b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    346ecee13a0f66f128c2feae21460098

    SHA1

    c148887fe3a43351abe9969d01ca58fc833ba859

    SHA256

    962390a2721ebab4b5e62dfcb649210717d8aae353ce2075e9c3bde81ba8d4e0

    SHA512

    42e27e64ff2239061c2e8fe8f1ba28bd0c6d97ee8e6124f63bc4f393d57ba472d9b0368a9a0488cc7829d43737c1f1f980ac157e7ac939bbbe37a51c239260a2

  • C:\Users\Admin\AppData\Local\Temp\Cab1641.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2343.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b