Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 16:00 UTC

General

  • Target

    259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe

  • Size

    1.9MB

  • MD5

    259ef1115b7bf006722bea3b8da1453f

  • SHA1

    14aa3a801b4788be4e630b4d2666e4f1d967ba4a

  • SHA256

    09ddefef23a09d5b252aa6825e4fc2772a60943b2b4b4f6447b2ab5a1d393f71

  • SHA512

    b9a7052caab06598be2300f6bffddf396814fc934847ece42d299f2b0be09c29624edaa58d44226323faf23e66e609b56198cd884af67d3cca2cdc04d25e8263

  • SSDEEP

    12288:lCUReXIoZogq/DHvun5CMkNKG3D7QcSdlzauXg2gXigsJ:QUwXIgqrHvu5BkNIcSdlrPCsJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe"
    1⤵
      PID:2768

    Network

    • flag-us
      DNS
      bin.memoryson.bid
      259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      bin.memoryson.bid
      IN A
      Response
    • flag-us
      DNS
      alt.zincbutter.download
      259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      alt.zincbutter.download
      IN A
      Response
    No results found
    • 8.8.8.8:53
      bin.memoryson.bid
      dns
      259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe
      63 B
      130 B
      1
      1

      DNS Request

      bin.memoryson.bid

    • 8.8.8.8:53
      alt.zincbutter.download
      dns
      259ef1115b7bf006722bea3b8da1453f_JaffaCakes118.exe
      69 B
      136 B
      1
      1

      DNS Request

      alt.zincbutter.download

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2768-0-0x0000000000A92000-0x0000000000A93000-memory.dmp

      Filesize

      4KB

    • memory/2768-2-0x00000000008B0000-0x0000000000A95000-memory.dmp

      Filesize

      1.9MB

    • memory/2768-1-0x0000000000680000-0x000000000074A000-memory.dmp

      Filesize

      808KB

    • memory/2768-4-0x00000000008B0000-0x0000000000A95000-memory.dmp

      Filesize

      1.9MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.