Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
01/07/2024, 07:59
Behavioral task
behavioral1
Sample
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
-
Size
46KB
-
MD5
1a85b940952753460297a2a34cdd4891
-
SHA1
6f556f53417ffe81992aa14689befdf295c7b679
-
SHA256
c90538cf91ab258e544c7f5f8545da75d54b0fc1e2a7ba8fc1f9762e2d6677f7
-
SHA512
cbf88bf9bd93f22e76c8c69446f7bf39a99e97e6ee67286be718c99d8e1b8208786931c8dad8dc3f773db0b3d0129cf5cd051f64b6ba8da1e7e5cec9c891713a
-
SSDEEP
768:LTe4aI2dFbQbQl8RbYeUF36PWGGi4QaNs6gaE0eQ1c0QH9RlYI6grTVZ:LpalZQbdbYeUFmGMGpgaE0evZ4gfb
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2784-0-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-1-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-2-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-3-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-4-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-5-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-6-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-8-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-9-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-10-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-11-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-12-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral1/memory/2784-13-0x0000000000400000-0x000000000069D000-memory.dmp upx -
Unexpected DNS network traffic destination 10 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 24.224.127.197 Destination IP 132.203.250.10 Destination IP 24.224.127.197 Destination IP 210.87.250.13 Destination IP 85.37.17.16 Destination IP 85.37.17.46 Destination IP 204.101.45.5 Destination IP 216.211.191.3 Destination IP 200.57.64.66 Destination IP 206.132.48.21