Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/06/2024, 23:47

General

  • Target

    0497c5de0c83cd16c087a87d103eae58_JaffaCakes118.exe

  • Size

    1.4MB

  • MD5

    0497c5de0c83cd16c087a87d103eae58

  • SHA1

    c496336ba3273b9a4b33d02758cc49f029c83dae

  • SHA256

    91c245efcde921b561a81d10824d6a664077690a812840cfc8cd6dd3ecb5380b

  • SHA512

    9ea0992fa957670045fac4be9f50ff08676b64f5f2f47eed5d093089ddab48579229f37b064ac7057554a7ec5743e99bacebf25771f70fd6b2cf366db9b0ded1

  • SSDEEP

    24576:ofyaA75I+1gzPFQAyPhkXDCSBerWdjq/HtDXikJncBU8evz798lzaomN246Bx:offAW+1gDhYSXDSrdVikJcBU8evv98Fl

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 22 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0497c5de0c83cd16c087a87d103eae58_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0497c5de0c83cd16c087a87d103eae58_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2416-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2416-69-0x0000000000400000-0x00000000005A9000-memory.dmp

    Filesize

    1.7MB

  • memory/2416-94-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB