Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 23:38

General

  • Target

    5c1385b0694df84045307ba0060aefe3_JaffaCakes118.exe

  • Size

    2.5MB

  • MD5

    5c1385b0694df84045307ba0060aefe3

  • SHA1

    c0b056ec6d7a17d85a310c0f662e758e0be980fa

  • SHA256

    f52f21c0ad534a6dc44b925904cac17cd926e3df6e0a53bc6f5aa692074f44fd

  • SHA512

    6718626851ac113011c057aae239e43f59bb2fabd381b0d31409c871e0ea23398294bfa09b344699f5954a2a8ff2a19c0bc03a5175a25291dcd0e02fae423bd1

  • SSDEEP

    24576:2CeD7lNsMtVXRU02nr6KfxTx+g5MJQPHE1mz7w/3MS2SXH:1e8q6/r6Kd+gNgmY/8UX

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c1385b0694df84045307ba0060aefe3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5c1385b0694df84045307ba0060aefe3_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1928-0-0x00000000026E0000-0x0000000002821000-memory.dmp

    Filesize

    1.3MB

  • memory/1928-2-0x00000000026E0000-0x0000000002821000-memory.dmp

    Filesize

    1.3MB

  • memory/1928-3-0x0000000000401000-0x0000000000402000-memory.dmp

    Filesize

    4KB

  • memory/1928-5-0x0000000000400000-0x0000000000DC4000-memory.dmp

    Filesize

    9.8MB

  • memory/1928-4-0x0000000000400000-0x0000000000DC4000-memory.dmp

    Filesize

    9.8MB

  • memory/1928-6-0x0000000000400000-0x0000000000DC4000-memory.dmp

    Filesize

    9.8MB

  • memory/1928-8-0x00000000026E0000-0x0000000002821000-memory.dmp

    Filesize

    1.3MB

  • memory/1928-7-0x0000000000400000-0x0000000000DC4000-memory.dmp

    Filesize

    9.8MB