Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
14/06/2024, 00:33 UTC
General
-
Target
a7555b20e4ac978a3aa146787f4b74bd_JaffaCakes118.exe
-
Size
173KB
-
MD5
a7555b20e4ac978a3aa146787f4b74bd
-
SHA1
155e3871fe3a65f6ae7f62acd2f91d9c47d93383
-
SHA256
9e4e5133fd5c3d2061f304582935c177bcd1ed80f200fe53847daf2b76956731
-
SHA512
37135c877bf44b2cef1e0168f3d4a30c64dc921b74036c457161c454ad7aaa818b12d97d8bbb18e38408e8e4b507152babc3f9766b9d68e5adcaf8f7908aaded
-
SSDEEP
3072:oGrk6sp4IE7dhs/WBWhqu2K2ZKDtDZVwYAGnK87CqSEAKVpQF2FF:4g7PsWBW8uN2ZKDtjiG77NSEAPF2F
Malware Config
Extracted
azorult
http://xenden231.zapto.org/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7555b20e4ac978a3aa146787f4b74bd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a7555b20e4ac978a3aa146787f4b74bd_JaffaCakes118.exe"1⤵
Network
-
DNSxenden231.zapto.orgRemote address:8.8.8.8:53Requestxenden231.zapto.orgIN AResponse -
DNSxenden231.zapto.orgRemote address:8.8.8.8:53Requestxenden231.zapto.orgIN AResponse
-
8.8.8.8:53xenden231.zapto.orgdns
DNS Request
xenden231.zapto.org
-
8.8.8.8:53xenden231.zapto.orgdns
DNS Request
xenden231.zapto.org
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB