Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
07/05/2024, 05:37
General
-
Target
1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe
-
Size
800KB
-
MD5
1f9e02d0aeeb210a13937741e0b56dd6
-
SHA1
6f9cc285913d2f86ba2977d9c303a35f2adad383
-
SHA256
29495917e026c8ad0b973705b8d428f0974c87463bb795e3b1473245ed89ece9
-
SHA512
d635a5925812cc628bd40c02794fcf6d8a88a67ec64b2fccdfcb22f61427da690ceb332820278f344ada45f5a1efb2bf6a8379b175c33178716c147357c85c15
-
SSDEEP
12288:zxX5chJeWOzeDju1oqGbOfQjSHFg4Z5a2MigMWJaNy/+ebafF74n1YUi0r:zxXyLFWeXmfQjSH5Z5vgSebc747i
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
780KB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
780KB