Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

937eef9b92...18.exe

windows7-x64

7

937eef9b92...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 03:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    937eef9b92f479490eb04d2883f0bc68_JaffaCakes118.exe

  • Size

    309KB

  • MD5

    937eef9b92f479490eb04d2883f0bc68

  • SHA1

    09743e12e817006cdf2623ea19598e07e67b8074

  • SHA256

    2126ae36969b0172fac2062a380f6c63fd9d6cc8b39301a9e59c05bb07957e31

  • SHA512

    e47b6e863aa76a68a2df89281950e7d25cf881fca1c97f4563bc455b54ab1a1bb1173a7e30d709bb72c3c36190cd6262ddb5ddbb16692d5d15a84ffc74a9a8f8

  • SSDEEP

    6144:or+8I5RxWBDg7V0eXze6OvA48E4XGvriXOkrta2my9xVtGmJmvY8eTaP:or+8I3sBDJejgPIXGvmXOL2my9xVYrv9

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\937eef9b92f479490eb04d2883f0bc68_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\937eef9b92f479490eb04d2883f0bc68_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuE180B26E.dll
    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{9FA63554-E0C2-43F8-A113-A8E0444517A2}\Custom.dll
    Filesize

    58KB

    MD5

    6fcfbc96bf5f5e265de9f2562449889c

    SHA1

    0c1554b206a19d8493f4c527a59d3e5294e2f333

    SHA256

    383fac28159ba8589047985f7cfbbf3496f9d7f2088f8faffefd11c1dabdb5f6

    SHA512

    1309dc0b701849509ad69cca80c5d054624fa212efd4bffa6e517328365d3695421c51d43e966e8a9199644a07eb6f13cb023f7d9b6e7cff4f9936cb18ef6f9b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{9FA63554-E0C2-43F8-A113-A8E0444517A2}\_Setup.dll
    Filesize

    208KB

    MD5

    b4dc5b89107d623135978726b2004c3f

    SHA1

    3d82e345bdfc52755fbab38c6f2ce31eb37ea4bb

    SHA256

    5a98d4b7c1812eacd0db99afd76b3d0496ce790390e2c4c76517bfb93432551e

    SHA512

    1e3b6f8e869c53c34965ab0cacbf2c1ac0efd1bea7fe14a147439abf0687fc0eab0d9581964be6215bf4a964d47b8d2365256a55386c0e89615079317096f651

    Download Submit