Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 06:25

General

  • Target

    14faee5b4ea83a1634cef761f1941087_JaffaCakes118.html

  • Size

    11KB

  • MD5

    14faee5b4ea83a1634cef761f1941087

  • SHA1

    5148c34326c62788b1eece6a72ecfb0f734fef71

  • SHA256

    c661488ecade75c0773ff3365e2f010b5198a87672ead072d251252388ae2161

  • SHA512

    ec4cca63f31c7ce35ce77e50bd006b45270ff8ba67a43caca575b367bf2e1b14eb3104a38a4fb2707f28fdbba30fabbee004b83f6142273749d87f47bead7e1d

  • SSDEEP

    96:uzVs+ux7pKLLY1k9o84d12ef7CSTUcj3OlpKIoB9bRcEZ7ru7f:csz7pKAYS/gQzb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\14faee5b4ea83a1634cef761f1941087_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9454f45478b9517fa0eb8a3755d62e76

    SHA1

    45755a07ce46660ebae8b1be1a7003b0cd26c1e4

    SHA256

    e12b8fc4f53b0b3b9f93543df0bda525c4c687887eeee4190ef09875253d3679

    SHA512

    2fdd17af9f3d8649bf348124021d86a8bac4163b34e6a76e196bfcdbda48460d2fd7e2695a25802028c71b128746e13d76d3962df8f46fb2e5f484ed0e15c82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8811d4563c6d39d189da95e367f7a69

    SHA1

    646ae833d1306b7020da81f4396cb3bbdecf1ace

    SHA256

    77bac82aed521a999365397314939b19e191f3e19529d64152238fdda6331502

    SHA512

    5d87bfcf683ac27d94131f9c1c58a4bed5b5fc6f03e9d45a46d16019d582370902dbf39383ea42c5b447859c8bd409b830c8036d263087e7bcd70b2fd01b9f63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cd386b57a7f000849c59b7dcaa8207d

    SHA1

    45fe48d7f86ba07614a861a4d057bd5dca727d1f

    SHA256

    b683dd999d7590183d62b6443ab242e87901e42f2f947dc509ae7968e5bfd805

    SHA512

    d4c30c8e9104cb64132747b8db01125e27c04f7fd7a9cd3f7b5fb509e4c4b6fe7cae1b719ed54a8a34958837c8169660c1d11053f6541c7c487765459102a503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8acfbe09998548a14fcbb08997e68fb2

    SHA1

    bba11e22b1a83f435afb7442674f9a9105c1a841

    SHA256

    d816fd2320e3712ef71d16146e0a57b4c3080a1ae307b7dafe410e429ad82bea

    SHA512

    0ee1bb7a8bad8204140302b80f4d637cc10ce22eff8cf59d63d53096e9ef4c420be70998b94b4cd1985bde1293bb6d331e02c6ed72af9909bc70194fdac3b2aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fc89c6238d20c68c25f0b69a298a476

    SHA1

    5302c75475628e7d1ef098320e61725009c3497f

    SHA256

    941f2fdf9e1a35b0df6202f8eb59eea3a0aeefa6470a8fd339c78e9ebad29434

    SHA512

    3dcf03332b9a22ec3886b7cce13561912dc045d8d7b4c5666902223cadd7b8d6675b5d5777b56530366dbf91ecde448702d2491e6c874dcbb4257964ef13ee91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbdd8dd93449469087aac55b769de0e2

    SHA1

    58b6396ddd86ac963b7559ea9b90455d6e92fb87

    SHA256

    efc6dcda325003475c1e4c72eea2508ca29de037afcf23404416558156c3bedb

    SHA512

    8b1dc4b8a162d677ba881c8295fdec2f9d26d1b42e633fbedfc42ad7d510ee10f89937cd376bfab62c1df78900360222f6b416cfed59399ffad300894f41e016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f17a297e4391bcbcae96f172f71237e5

    SHA1

    b713de1e08ec2a45ccec26522e1b36bbae507934

    SHA256

    d86566219aea1948b725bf1c614a84dccd895e1501183f9b836d95e43098c307

    SHA512

    e057fe069e03507a51e55cdba11731db89c5a9fcb6e19eae4372cc9d312129b7f3458cc845c8b4a5dfca50866693d25df2b9faa5b390e73228dbabd6996dfbca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc26ab0cf4b6e6cfab6f0f458bf4c136

    SHA1

    0a69cbf3ef7f252ae5fb4d268ed752eb1a06fb29

    SHA256

    3dfcb9bf48bd066100d45eda3810545dd832c54dcd43e5043c9c5abddcebf51e

    SHA512

    224441d7624e895d5e0b5df197e27cc4f632458bc1d12a8d101e9606f886dfd9cb0b0c607e8aad0b2ed11e20945e4ac784a2ffaaaabe735ca7cb03c5f3b720e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17f06374e5f18b119b632b08c8b6aa96

    SHA1

    e88e5de2573333373d8d8814ce1ca7b1c3ef4e88

    SHA256

    e9cbefbd27599e53543befeeef7dd08f62c58f239b944e841742a897c38dc2d0

    SHA512

    34138c2c6a6731d7030c2968cd4d81afb6174b00f9d905791a18c5bd7afa4b1d5c5b34836c37ae935fd87bab49af300dae0d54a580dff4d5c88de5c5887a7341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67f2fa4a0cdf19ee9cf7f31171b70fb4

    SHA1

    88bf5c6996e5527b74bf822753d5fbb47f7d1f01

    SHA256

    af045d907547ed6886dc68d7399099705244596b9135efc81abbedece7c9f160

    SHA512

    0ba882c00bfb00c72a59979662bef871fd4bd46e62e8d6307eb47ab32795449eebd6335bd8e425d0811bdf7ad32e58e3b551116719b3cd4090b211f682e60c7f

  • C:\Users\Admin\AppData\Local\Temp\Cab27EE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar291D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b