Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 07:46

General

  • Target

    b7776650f703572a7e81df1c73553857_JaffaCakes118.exe

  • Size

    210KB

  • MD5

    b7776650f703572a7e81df1c73553857

  • SHA1

    321d0bdeb5fb92cdcc3ae257cbec3f75401574e0

  • SHA256

    06947608fd61d0876808209af5a7626224194a90d811e0229632e048d5405c02

  • SHA512

    8818e33da13874faad6958e1114f23aa5e1508abf9ab4af075e528b5db636464cdee1f525c6e333da4299c895937bca93895f9adb750b93e6687a7fc5c9a71d3

  • SSDEEP

    3072:ZPQ2Qv5XTAWPZBeHWjd+hxiPidimvlnvA9AAw2qe//pLnNF+NrE4ec4pTVQaCutD:ZorFZ3Q1jvlnsRwK1GgTVvCuDrEo

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b7776650f703572a7e81df1c73553857_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b7776650f703572a7e81df1c73553857_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2108-0-0x0000000000770000-0x00000000007B0000-memory.dmp

    Filesize

    256KB

  • memory/2108-1-0x00000000013A0000-0x00000000013E0000-memory.dmp

    Filesize

    256KB

  • memory/2108-3-0x0000000000080000-0x00000000000AF000-memory.dmp

    Filesize

    188KB

  • memory/2108-16-0x0000000000770000-0x00000000007B0000-memory.dmp

    Filesize

    256KB

  • memory/2108-17-0x0000000000850000-0x0000000000890000-memory.dmp

    Filesize

    256KB