Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

6f85fa8a31...18.exe

windows7-x64

7

6f85fa8a31...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 19:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe

  • Size

    281KB

  • MD5

    6f85fa8a31beba8d43dd46aa83bdbf67

  • SHA1

    06d7a0e88ae0b410e01595b121f5ff1808228930

  • SHA256

    23a428a7da22471818ad82699ca69f9cc2f62f06bc966bd52f389d28654ddffc

  • SHA512

    0a26a393a5be678de32a4e743147f1603940afb6cbdfdea0d84ee57ecba4aad9a4c442898c88722eff48f6aefd35f15e731daed9f64730cab7fb0d094f557d76

  • SSDEEP

    6144:/r+yI5RxWBDg7V0eXze6OvA48UEJFeiCLxNw4QC8cdH:/r+yI3sBDJejgP0JHYz1f9H

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu0E5D5DE1.dll
    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{A52110B7-B864-49F6-AB1D-F0467EC23241}\Custom.dll
    Filesize

    58KB

    MD5

    6e8a29b73d7cb2fff7f60d6160cdadcc

    SHA1

    76938d8f6282013f922782a04fb5591eab2901e1

    SHA256

    92748be00d20070b81c154d4bc048ffc2c7196e934f6b92ec49b235c16fb69ee

    SHA512

    f362a5e3dff4bcd77847bd9766ad73ada924ddade1215b972fee5a3ca6a67f9b0ac0763750caef549319b0edc7425fbdb6ca0bf8517e5eac423e12c54977997b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{A52110B7-B864-49F6-AB1D-F0467EC23241}\_Setup.dll
    Filesize

    145KB

    MD5

    355eecd5bbf7d156245ac6513c4badc3

    SHA1

    7dbde896f2e57f93f98ba898467ca89cef7b56ac

    SHA256

    381193a96c0aec47c27f458a5d8a706d131cf358ddf237b674263eed6d7e3c65

    SHA512

    bc6eb136f716ab2128ce31a8a5fde1c2b0498bfbad492c152e4a483bc267e20d17eb5c34977d1dfc9338b8088dfa4c70cad12022d148c1f02019df66d4974bd2

    Download Submit