Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 01:19

General

  • Target

    378001b468d30a2f2692c9c4f4cd4b7b_JaffaCakes118.exe

  • Size

    226KB

  • MD5

    378001b468d30a2f2692c9c4f4cd4b7b

  • SHA1

    533807727ac52b229ddf3f6e72f837f8e8e272b3

  • SHA256

    058ecce104b0079fc41d3bc2f877e8114cd96c9fee275e8a9de58d411923f1c4

  • SHA512

    c610cb59d85dbba7c5e842a85ee590706c1d37c370f64fa2fc7abaa4c2be7cf58808f79ab45eb5c0c7feca3cdc05804e62f569676e70d5edff218ca0b04ee1e1

  • SSDEEP

    3072:cNGzhCzXy+hmRU7VMmQUIHpOxWvMzzYg6oLmt1sLGgIj/HDehd8+kDDliFdcH4v:pzYnMRUlIwrwomt1sLGn/HDehTmH2

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\378001b468d30a2f2692c9c4f4cd4b7b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\378001b468d30a2f2692c9c4f4cd4b7b_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1976-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1976-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/1976-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/1976-3-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1976-4-0x00000000000F0000-0x0000000000110000-memory.dmp

    Filesize

    128KB

  • memory/1976-5-0x00000000000E0000-0x00000000000E1000-memory.dmp

    Filesize

    4KB

  • memory/1976-10-0x00000000000F0000-0x0000000000110000-memory.dmp

    Filesize

    128KB

  • memory/1976-6-0x0000000000580000-0x00000000005AF000-memory.dmp

    Filesize

    188KB

  • memory/1976-18-0x00000000000F0000-0x0000000000110000-memory.dmp

    Filesize

    128KB