Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 05:28

General

  • Target

    fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe

  • Size

    148KB

  • MD5

    fe8b6c2cf33bff45a18e8ca01b9c11a7

  • SHA1

    1c7abd5e382668883efdfc740c986c5bb3f63d28

  • SHA256

    610d827efae395c36665083180b68d5f3d628bc44fd2c712bda51a2c91a3da99

  • SHA512

    eee6b7ca47e1d7950cab8e6208749b23941a17f8bfc9b676c9fb29771015ed4766c0fe762e5b8bb1c7ae44e3bb8b16f3e2edc1ee02360207c645d00cd9c905e7

  • SSDEEP

    1536:4KRPlTbpMEt7LprwsK0N9foFSRa/EHtjX8EzPozGQuzS5d8g0j+Lq2:4CPlTbpMmpY0NxZLVAzGQaSjy

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\bassmod.dll

    Filesize

    35KB

    MD5

    e3a6587ba5a4ee4514ecaa4265dd9b2c

    SHA1

    b44bb9b5fc3478fa6ea5140603857ee0c2d4c4fd

    SHA256

    566934a049ae41fe36e2e122825875e5c02d4db083e744a7a3c94f456cec2f94

    SHA512

    90f4e5ceac00a0815452ef951feb3aa29e6ef408d8d4cda023c3fdd49ba0238e06589cee9cc0be842eddd1b02bd1d448d9ab8bdaed70651b38d6074c9f99d22f

  • memory/2032-13-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-19-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-5-0x0000000000400000-0x000000000042E000-memory.dmp

    Filesize

    184KB

  • memory/2032-6-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-7-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-9-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-11-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-0-0x0000000000400000-0x000000000042E000-memory.dmp

    Filesize

    184KB

  • memory/2032-4-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-15-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-17-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-21-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-23-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-25-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-27-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-29-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-31-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB

  • memory/2032-33-0x0000000010000000-0x000000001002F000-memory.dmp

    Filesize

    188KB