Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2024, 13:20
Static task
static1
Behavioral task
behavioral1
Sample
636f206f9d4baae10a097dd4b0b8b9cd_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
636f206f9d4baae10a097dd4b0b8b9cd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
ZYing.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ZYing.exe
Resource
win10v2004-20240508-en
General
-
Target
ZYing.exe
-
Size
597KB
-
MD5
e5372cd7d4b76723754f34d6c651fd6a
-
SHA1
0c6ea81074fd47e8c2b67263ac31a1287e0ed70c
-
SHA256
de58f307376638a09e017cbe263db9078f642416775ff2ef853e16dcd5d7d56f
-
SHA512
0ec0e26d0edd86ebcb64ef8f5903097e90a96f54dded2cc84607f57b130dbc08a7e427a9b0002fb8965d353bbed175fb190b3f7340352e9efb9756c9d2a4beb0
-
SSDEEP
1536:Ugx5uQohgTJ637rONBRCV5Oa7jyqXHun1pcxiiKPQi8+xZ1idZZPz37rONBRCV5G:lb/NEOQ5VY1d9AdOQ5VY1dZ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4660 ZYing.exe