Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 22:14 UTC

General

  • Target

    8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe

  • Size

    546KB

  • MD5

    8f9c3ccd917b1c231e3df0c23c9068f5

  • SHA1

    af6d7047a9bebb290022b89457641bf2a4ebf2ce

  • SHA256

    711ae361814be3b0e4affd6ea523a09a5917ffe83ed43ff4ec7ef8c6f6835512

  • SHA512

    a432cac45ecfeb1b90af6c4efe3c1114cd9a5bb40787c1437edc48602a3a7134fb0c58dea0304bd11d64695d951f06ca2fb5473f43ebdbab4312b4dd1bd56e01

  • SSDEEP

    12288:f4fmuV/2SlI1MCAHab5I0WozQsmknY87Z1EPclMkc9A7Z2W:f42DMCA6b5fWQmknY87LEPcl9nlf

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

  • flag-us
    DNS
    dlg-configs.buzzrin.de
    8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    dlg-configs.buzzrin.de
    IN A
    Response
  • flag-us
    DNS
    dlg-messages.buzzrin.de
    8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    dlg-messages.buzzrin.de
    IN A
    Response
No results found
  • 8.8.8.8:53
    dlg-configs.buzzrin.de
    dns
    8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe
    68 B
    131 B
    1
    1

    DNS Request

    dlg-configs.buzzrin.de

  • 8.8.8.8:53
    dlg-messages.buzzrin.de
    dns
    8f9c3ccd917b1c231e3df0c23c9068f5_JaffaCakes118.exe
    69 B
    132 B
    1
    1

    DNS Request

    dlg-messages.buzzrin.de

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DLG\initWindow\noconnection.html

    Filesize

    2KB

    MD5

    a0ee32dc4ffc79fdef2dc0467da538c5

    SHA1

    15d78592ac2c313a52d3c22783aae9bb4c787182

    SHA256

    b4508b7dcc08b2b93cd64bee68bd5174fe48f48280e59f9a81d4861c3ef0431d

    SHA512

    e7c02d6211878466d1fb77d2d96a79615f3e85cc9579fb6f54001639902eaa106d734a9c7ef07278c5014e7dc8d28d7b2ee28f677f362d80dfd3d26e59a976e8

  • memory/2744-0-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/2744-20-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.