Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 11:42 UTC

General

  • Target

    f5b07ccec99734f453e4e4b545871181_JaffaCakes118.exe

  • Size

    1.8MB

  • MD5

    f5b07ccec99734f453e4e4b545871181

  • SHA1

    e5b5148ad40a04735fb1fc81964739729b306e6b

  • SHA256

    c9bc0ff68fb2ca057662651a714df6b5f3d37dddce2be83f29ce677cd17bb207

  • SHA512

    a371ed2967430c1b6951115ebd8e4b1bef0db3411f3703ae43a712e3d3efd58ae4106d6fe84acad2fa48947fe3f8a6eca21ac0d5007f650074562dfc0b05efb2

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqM:SCqm2Jpr0nNM7Dus7Nx5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 9 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f5b07ccec99734f453e4e4b545871181_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f5b07ccec99734f453e4e4b545871181_JaffaCakes118.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll.exe

    Filesize

    1.8MB

    MD5

    4fd9e9aa659a1312ab7a6278377723ea

    SHA1

    d90a6747e95a98e4be2c49cba13e1dbc198d0946

    SHA256

    56366b558c8b39dcfad793186843c56769c80453a56046099804f5b53b800c66

    SHA512

    8ce400d7fb015451e69ca785236c922fda2a07cc65db1a8efaea770a13489c9e3b1cee8ca02cee434d0faad76f5deb0a564c00252ca4a425870a054af7d3233c

  • memory/2412-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2412-3451-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2412-9195-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.