Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

0212021606...18.exe

windows7-x64

1

0212021606...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 02:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    021202160634402dc6fc75ca97879127_JaffaCakes118.exe

  • Size

    635KB

  • MD5

    021202160634402dc6fc75ca97879127

  • SHA1

    224e05ebf524bd7f22260a971c0c319ff310f43b

  • SHA256

    d3ad8e44bb4f4e61366699006364b9d7d01beeee887b587a013bda311dc54ab1

  • SHA512

    ba66ad3fbe38406d628c07e71e3a426e4fde60b855f63d109e2e881ddb5f7f3899f5f8fbae305dcf140ad38ed4e9e5b1bca7be3acb27d7730e86469a3e208b5d

  • SSDEEP

    12288:tIbPsXD/YIYkaJou7JYOoujbeWADdAq08rWrDUj8pSC:tesXD/YIYkaJogJYOBbeWADdAqfWrDUM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\021202160634402dc6fc75ca97879127_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\021202160634402dc6fc75ca97879127_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
    Filesize

    593B

    MD5

    aa609015d33e8cfebe7f0e0d794182f2

    SHA1

    5c06d7aa770a226a44f8a17e96f960058eb2b3f5

    SHA256

    4d07af6b71eb1f58c0294080445606353586d5a0ee8a8744d85af9519818ca9e

    SHA512

    90b9933d757d3a037807d66086c112e00f3f8fa32bb9434859971c87c452ce79342a8e53b80e7d0ede9a074fedf503998b5b60fadf126a3172301925eb9ffddd

    Download Submit