Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 18:18

General

  • Target

    0f0f9ec9a627a32b2f6dced3a31ae766_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    0f0f9ec9a627a32b2f6dced3a31ae766

  • SHA1

    f788264b833fd6ada3b9d1e2fd2524f8b396f532

  • SHA256

    6e878bd1d8a863fd82d9a5bc1bb7a0a61a979a6ece17768e70a8549493d93cd8

  • SHA512

    a3050f18fb3cf04397949dc0910bc78cec338dc5c9920d2fec09464993d0d1bb12f45726cfda7cf3c07a2e319638e5a76693d60ef373c9e274964742b6066254

  • SSDEEP

    24576:d3XPfNPrsm5WEVgGc+A7kTx399IkcPYmjcWXVGHueiO:d3335TPd9Z2VGHueiO

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Control Panel 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f0f9ec9a627a32b2f6dced3a31ae766_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0f0f9ec9a627a32b2f6dced3a31ae766_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Checks processor information in registry
    • Modifies Control Panel
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-6-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-11-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-0-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-1-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-5-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-7-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-16-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-29-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-30-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-28-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-27-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-26-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-25-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-24-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-23-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-22-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-21-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-46-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-20-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-19-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-18-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-17-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-15-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-14-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-13-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-12-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-9-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-10-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-8-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-62-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-37-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-44-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-64-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-63-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-61-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-190-0x0000000077E80000-0x0000000077E81000-memory.dmp

    Filesize

    4KB

  • memory/2040-189-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

    Filesize

    4KB

  • memory/2040-212-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-211-0x0000000000518000-0x0000000000519000-memory.dmp

    Filesize

    4KB

  • memory/2040-213-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-210-0x000000007EB10000-0x000000007EB41000-memory.dmp

    Filesize

    196KB

  • memory/2040-188-0x000000007EED0000-0x000000007EED1000-memory.dmp

    Filesize

    4KB

  • memory/2040-187-0x000000007EF20000-0x000000007EF21000-memory.dmp

    Filesize

    4KB

  • memory/2040-186-0x0000000078060000-0x0000000078067000-memory.dmp

    Filesize

    28KB

  • memory/2040-215-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-185-0x0000000077FE0000-0x0000000077FE7000-memory.dmp

    Filesize

    28KB

  • memory/2040-184-0x000000007EF10000-0x000000007EF11000-memory.dmp

    Filesize

    4KB

  • memory/2040-183-0x0000000078070000-0x0000000078077000-memory.dmp

    Filesize

    28KB

  • memory/2040-182-0x0000000077FF0000-0x0000000077FF7000-memory.dmp

    Filesize

    28KB

  • memory/2040-181-0x000000007EF90000-0x000000007EF91000-memory.dmp

    Filesize

    4KB

  • memory/2040-180-0x000000007EEF0000-0x000000007EEF1000-memory.dmp

    Filesize

    4KB

  • memory/2040-179-0x000000007EFA0000-0x000000007EFA1000-memory.dmp

    Filesize

    4KB

  • memory/2040-178-0x000000007EF30000-0x000000007EF31000-memory.dmp

    Filesize

    4KB

  • memory/2040-60-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-59-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-58-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-57-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-56-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-55-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-54-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-53-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-52-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-51-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-50-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-49-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-216-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-48-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-47-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-45-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-43-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-42-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-41-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-40-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-38-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-39-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-36-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-35-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-34-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-33-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-32-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-31-0x00000000005F0000-0x000000000068A000-memory.dmp

    Filesize

    616KB

  • memory/2040-218-0x0000000078090000-0x0000000078097000-memory.dmp

    Filesize

    28KB

  • memory/2040-220-0x00000000780B0000-0x00000000780B7000-memory.dmp

    Filesize

    28KB

  • memory/2040-221-0x00000000780C0000-0x00000000780C7000-memory.dmp

    Filesize

    28KB

  • memory/2040-219-0x0000000078060000-0x0000000078067000-memory.dmp

    Filesize

    28KB

  • memory/2040-222-0x000000007EB10000-0x000000007EB41000-memory.dmp

    Filesize

    196KB

  • memory/2040-223-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB

  • memory/2040-225-0x0000000000400000-0x00000000005ED000-memory.dmp

    Filesize

    1.9MB