Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

083b851c65...18.exe

windows7-x64

1

083b851c65...18.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 17:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    083b851c651a5fe88fea6aa62a3e7f42_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    083b851c651a5fe88fea6aa62a3e7f42

  • SHA1

    0aebc42d335d7b45bcfd5a23b76dfb9d6ee04be9

  • SHA256

    bf3a5388b21c31e2068c998a51b5ce738a4011a8d4215e5d4079077360f6083c

  • SHA512

    635105a0cb4c4f4944440addd364dce8a07ac1c51b8141017e63c71376119e8bdda94ab8da0455360c27cdf43140d5e8fe2500d5086ceb0d0eb4d14ca56b5a96

  • SSDEEP

    192:/TNtg3E68l7OVougSyL4JsSpLuLh0D9SeZKre:/TNS3LyOVouUSLND9S+Kre

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\083b851c651a5fe88fea6aa62a3e7f42_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\083b851c651a5fe88fea6aa62a3e7f42_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:3540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\update_MSN8.exe
    Filesize

    96KB

    MD5

    1fc207e1e0e1e65a6e251393f963f784

    SHA1

    8025e839b71bb674eac8729ff326bd563e91d172

    SHA256

    81815b32d906b949d5bbab56c5a395aa7fc62285d390fe534b319bdc2f246eb4

    SHA512

    523c6729ccdbab85054c9af402d8c52780cc2fb55ef2431d33d4acfbcd4368a0583e3d7f85c668c2c81efbfc44eef536db9c70ade01379319dab4b3f31e52ea5

    Download Submit