Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 17:09 UTC

General

  • Target

    928d937a002f0fda15087b9963bfb31b_JaffaCakes118.dll

  • Size

    56KB

  • MD5

    928d937a002f0fda15087b9963bfb31b

  • SHA1

    b8f3fb94533f8e2ee33566dc36561cb3dbaa11e6

  • SHA256

    66ad5c01e4837c6616362398e121e6b6f7b5bcbfaeb8eaead8bf195a7bae9eae

  • SHA512

    2258103d0985226631cc093cdc74b31b1c90c4072d56498432ab4b2b696f705994ac69d53d7a34d55588cbd541506c14c728bf4e20d275d2803d29963346a4a4

  • SSDEEP

    1536:WSraRApM9DPtkxjHAoRnHcncSILxr3glTFdUIyM:Z2RApoDAD5RnIFqbgtF6IL

Score
1/10

Malware Config

Signatures

  • Modifies registry class 27 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\928d937a002f0fda15087b9963bfb31b_JaffaCakes118.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2488
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\928d937a002f0fda15087b9963bfb31b_JaffaCakes118.dll
      2⤵
      • Modifies registry class
      PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1952-0-0x0000000016E50000-0x0000000016E78000-memory.dmp

    Filesize

    160KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.