Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 15:33

General

  • Target

    9b2ba3b6cf680ff9a39ced85fc0ba22c_JaffaCakes118.exe

  • Size

    226KB

  • MD5

    9b2ba3b6cf680ff9a39ced85fc0ba22c

  • SHA1

    c56ccaa12c08017f2211e6e41ca5cc452056e0a2

  • SHA256

    12bfa3d72a0d87bb5814acfaefa9a311fd8b865364816e4153296bcddedb7bce

  • SHA512

    ce1b4d46bce510dbd73a4f40a20418738d2704decd137b30e8cc1f7d2a71871498b42a8a338ff9e9ba244c20b7dbb8d04627614402cfc1d884a03e9e7325b587

  • SSDEEP

    3072:TgEq1DOqzYI0PWMAQoZV8gKHAeh6CtRqcQ2cjSTdiGs2EjL:T9qtJt0PWggFCtgLHsts2E3

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b2ba3b6cf680ff9a39ced85fc0ba22c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9b2ba3b6cf680ff9a39ced85fc0ba22c_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2036-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2036-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2036-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2036-3-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/2036-4-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB

  • memory/2036-5-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2036-10-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB

  • memory/2036-6-0x0000000000160000-0x000000000018F000-memory.dmp

    Filesize

    188KB

  • memory/2036-18-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB