Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 04:33

General

  • Target

    e93b362e162865579238329539a396e7_JaffaCakes118.exe

  • Size

    97KB

  • MD5

    e93b362e162865579238329539a396e7

  • SHA1

    8d36d3702a2dd789fb08e8c5a3290c3ce2fb5f91

  • SHA256

    2e9ff91c5b69e45b37ead863068cb42af4297e9b1c555c889f48b8eb688c305c

  • SHA512

    d676e6c1f8734333be87609854066658d23dc6a2708dab2a7d99f14ab0fd72df26731ce18b6ecf2c04fb043fe0d713daf2c19df15509de94442ea43afe8e6910

  • SSDEEP

    1536:tmHuHw2sKUzon4vW48N4Q+X/TsLLbybPlfyXrA02LAyWlPlf:tmS5sKZcW48kLcCdfyXr0AyWldf

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e93b362e162865579238329539a396e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e93b362e162865579238329539a396e7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-0-0x00000000009E0000-0x00000000009FE000-memory.dmp

    Filesize

    120KB

  • memory/2200-1-0x000007FEF55D0000-0x000007FEF5FBC000-memory.dmp

    Filesize

    9.9MB

  • memory/2200-2-0x000000001B180000-0x000000001B200000-memory.dmp

    Filesize

    512KB

  • memory/2200-3-0x000000001B180000-0x000000001B200000-memory.dmp

    Filesize

    512KB

  • memory/2200-4-0x000007FEF55D0000-0x000007FEF5FBC000-memory.dmp

    Filesize

    9.9MB

  • memory/2200-5-0x000000001B180000-0x000000001B200000-memory.dmp

    Filesize

    512KB

  • memory/2200-6-0x000000001B180000-0x000000001B200000-memory.dmp

    Filesize

    512KB