Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 06:38 UTC

General

  • Target

    6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe

  • Size

    546KB

  • MD5

    6a0f3c8415cb0984d29b9ad1dbcc8000

  • SHA1

    6930a885be4766732cfb6bb6a7ead95f057bf313

  • SHA256

    34ae92365bb1407545cdceb454c6182683a0988520491bdfb73be410e9c8b077

  • SHA512

    a8dfddf173623d82e5a5839f57597bc8f358e482998dc4c5f4c801ca63b425db5aa532181beec08954f378d14f14092e7fed19c503d3c86e2bda7a84da8d167d

  • SSDEEP

    12288:F4fmuV/2SlI1MCAHab5I0WozQsmknY87Z1EPclMkc9A7Z2P:F42DMCA6b5fWQmknY87LEPcl9nli

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

  • flag-us
    DNS
    dlg-configs.buzzrin.de
    6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    dlg-configs.buzzrin.de
    IN A
    Response
  • flag-us
    DNS
    dlg-messages.buzzrin.de
    6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    dlg-messages.buzzrin.de
    IN A
    Response
No results found
  • 8.8.8.8:53
    dlg-configs.buzzrin.de
    dns
    6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe
    68 B
    131 B
    1
    1

    DNS Request

    dlg-configs.buzzrin.de

  • 8.8.8.8:53
    dlg-messages.buzzrin.de
    dns
    6a0f3c8415cb0984d29b9ad1dbcc8000_JaffaCakes118.exe
    69 B
    132 B
    1
    1

    DNS Request

    dlg-messages.buzzrin.de

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DLG\initWindow\noconnection.html

    Filesize

    2KB

    MD5

    a0ee32dc4ffc79fdef2dc0467da538c5

    SHA1

    15d78592ac2c313a52d3c22783aae9bb4c787182

    SHA256

    b4508b7dcc08b2b93cd64bee68bd5174fe48f48280e59f9a81d4861c3ef0431d

    SHA512

    e7c02d6211878466d1fb77d2d96a79615f3e85cc9579fb6f54001639902eaa106d734a9c7ef07278c5014e7dc8d28d7b2ee28f677f362d80dfd3d26e59a976e8

  • memory/2204-0-0x0000000000410000-0x0000000000411000-memory.dmp

    Filesize

    4KB

  • memory/2204-20-0x0000000000410000-0x0000000000411000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.