Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0e28dfa9d5...18.exe

windows7-x64

7

0e28dfa9d5...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 12:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e28dfa9d5d51dee53da95336d5aa9b9_JaffaCakes118.exe

  • Size

    420KB

  • MD5

    0e28dfa9d5d51dee53da95336d5aa9b9

  • SHA1

    c7fe536c7c4a65300ac68e7dab31a3eb88a6356c

  • SHA256

    2d4c678a9fc1dd6ee44ac5bd8ceb9b2eb608ad809d0234ce1b347167061db04a

  • SHA512

    0f35a49c1730f8fecc7595f5b82b20b9244541ef2230f12527490b91f6976fc1e1b42c42446c6bd82d2744702208a54a91ce6f161cc2141a8f00c8b9531c6e85

  • SSDEEP

    3072:eoTCOr9+v+nmaEm7pE7rmxihP51llkNdgGPCK0LWahmXP5apiWsgB9PLB0LWuhm:eEtr9+QmaF7G7rmuPTlloqiPR+dK

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e28dfa9d5d51dee53da95336d5aa9b9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0e28dfa9d5d51dee53da95336d5aa9b9_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\gc.dll
    Filesize

    129KB

    MD5

    3820b26dcb9e8f276a75245535d18a75

    SHA1

    95bc059c2a26bca56ded95f3a0e7fe2b5c058c8b

    SHA256

    bd54a327100a87e9c437154a4622193fa1c8be792473f34d824513dab1dd5221

    SHA512

    cf9a658e539667e1fcc635205180ad4be8000e7be54bb71e5db1ceb3ef06180e824cd41d2ce3e57c0ede7832ea2dfc6011b1dc3440bd54a41428eaad12eb11c4

    Download Submit

  • memory/2236-1-0x0000000000400000-0x000000000046D000-memory.dmp

    Filesize

    436KB

    Download

  • memory/2236-4-0x0000000000400000-0x000000000046D000-memory.dmp

    Filesize

    436KB

    Download