Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 10:57

General

  • Target

    754070dbb702234e4c3a5613992233dd_JaffaCakes118.exe

  • Size

    663KB

  • MD5

    754070dbb702234e4c3a5613992233dd

  • SHA1

    a45394ec464c753afd5657f7d93f58fb0dda0aff

  • SHA256

    b4e712f8ae4f69c07b89e801eeddacdb072b47c66796e6b6809a5c03219cae92

  • SHA512

    1c38153ec4d88c0a61b77a936f7d8c7b08d70fc12ad4e8522e77d4ccdbc30995601fa36bd6221a9b9c821faae304f4f394d61382e83488af3cd3db164b29c6a2

  • SSDEEP

    6144:bti3on+AjNqGOToYCByR0w/BZaEZ2FhhDpP8Jfw8wodVDydR/Wc:btMgJjMGOVfvghhpKo8ndVDydtr

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\754070dbb702234e4c3a5613992233dd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\754070dbb702234e4c3a5613992233dd_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1936-0-0x000007FEF5693000-0x000007FEF5694000-memory.dmp

    Filesize

    4KB

  • memory/1936-1-0x0000000000C70000-0x0000000000D1E000-memory.dmp

    Filesize

    696KB

  • memory/1936-2-0x0000000000B80000-0x0000000000BFC000-memory.dmp

    Filesize

    496KB

  • memory/1936-3-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB

  • memory/1936-4-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB

  • memory/1936-6-0x0000000000C30000-0x0000000000C3A000-memory.dmp

    Filesize

    40KB

  • memory/1936-5-0x0000000000C30000-0x0000000000C3A000-memory.dmp

    Filesize

    40KB

  • memory/1936-7-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB

  • memory/1936-8-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB

  • memory/1936-9-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB

  • memory/1936-10-0x000007FEF5693000-0x000007FEF5694000-memory.dmp

    Filesize

    4KB

  • memory/1936-11-0x0000000000C30000-0x0000000000C3A000-memory.dmp

    Filesize

    40KB

  • memory/1936-12-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

    Filesize

    9.9MB