Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 10:21
Static task
static1
Behavioral task
behavioral1
Sample
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
-
Size
76KB
-
MD5
0319f4a199d00562e1e2458c01deef1a
-
SHA1
07be3534eb0d269d1d0ee2addd711e03d5f8bb39
-
SHA256
d85bd4d06c7b84f22980e36da1b11a18f66b1bf63579ac0dc6769ea422293d8b
-
SHA512
9b65ed8be9481359dd41a15fa32870b88b7a1131b2aaf9919d5e3e634cc0c7177907cde624c9a28d49404f43d435ea742cfbda1804f55768680ca69086f97d52
-
SSDEEP
768:1FGPbKIflMdYYLqsouZFRELqFlhFM/aCKdN27fx0Xn6YOD5ryTUu:1QPb3aL2uZFxlD8K727fxi6Ycu
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1540 0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1540 -
C:\Users\Admin\sioahim.exe"C:\Users\Admin\sioahim.exe"2⤵PID:2536
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
MD5bae6f440d75cbc12283136cddba28411
SHA117f68bc291529211c63ed1d862eaf96ed8873b2f
SHA25652729a0515b97b3125d3e1bc1a5678860410b38d6417f0ef6b876e89d84e9d9b
SHA5124c00ed965f98be592eb26d2b251d4ce31749a7e662ffcf9b450c2ead68e667691764dfa138d874060fd2986374fb9e83bd50e0479e11a0fc053db67c5010f385