Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

fd3c409c64...18.exe

windows7-x64

6

fd3c409c64...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 17:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fd3c409c64bf598542c8124859054179_JaffaCakes118.exe

  • Size

    258KB

  • MD5

    fd3c409c64bf598542c8124859054179

  • SHA1

    a0b4978da587257a78399c1cd7c85a51d2ac2144

  • SHA256

    42922ca824df21a48ec8054c357a905279b30d7627b236dfe6b9f749b4e843ab

  • SHA512

    daffa1361aff02f5f6f18c4aad0a7074ba9a346ed43a610377303f8d83249d9ee571119702cc1859d7158838d3e1dee0b53625eab061b63b1b8aa425f1ba2566

  • SSDEEP

    6144:UKeGRy3Pof5VqpREeNjZFdv0rTPWFpheo6L:CfU8pREeNjZFdv0rTeFphaL

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in System32 directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd3c409c64bf598542c8124859054179_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fd3c409c64bf598542c8124859054179_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2740-0-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2740-2-0x0000000000400000-0x0000000000495000-memory.dmp

    Filesize

    596KB

    Download