Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 01:11

General

  • Target

    e8df410873e4248761dc7385ca9310c4_JaffaCakes118.exe

  • Size

    3KB

  • MD5

    e8df410873e4248761dc7385ca9310c4

  • SHA1

    98c34f36be5fd299d0f1d23f3e0c53e2ba56a156

  • SHA256

    0b896b27beeb8357fa37f52bddfa742e6979434dcc6cc78dc946c8f06e6d4be7

  • SHA512

    bf2bef337d71a959352aa790daa391c8baf4379a6a7957a6971789d9dbc104f5a6df09d0a41fb61f825d9db19745cb621861187ee2e7feb272a53b8c86bc370e

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Modifies data under HKEY_USERS 24 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e8df410873e4248761dc7385ca9310c4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e8df410873e4248761dc7385ca9310c4_JaffaCakes118.exe"
    1⤵
      PID:2136
    • C:\Users\Admin\AppData\Local\Temp\e8df410873e4248761dc7385ca9310c4_JaffaCakes118.exe
      C:\Users\Admin\AppData\Local\Temp\e8df410873e4248761dc7385ca9310c4_JaffaCakes118.exe -A
      1⤵
      • Drops file in System32 directory
      • Modifies data under HKEY_USERS
      PID:836

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/836-1-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/2136-0-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/2136-8-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB