Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
03/07/2024, 10:28
General
-
Target
22072f995ce54648c2eac2113205914a_JaffaCakes118.exe
-
Size
403KB
-
MD5
22072f995ce54648c2eac2113205914a
-
SHA1
697290d61f5cae834c7e825c42f91775dbdd555f
-
SHA256
cb2dd254c660e12623ad7df5154945e3f7aefdba062288e0caad5bfa26481552
-
SHA512
bcf49f84da9ce37ca76729be280080e6abdc7d4f8d7dd207cfc8bc9340ca6c49315aec7f3c43d4b67c900584fdf0e787eab869138bcc27f2ccbe0c831d31854f
-
SSDEEP
6144:Pj2rWYaSbUP6Fim96VkyV0iN7D8Q06Kx22h+oly66O/LpFJzOzwZBH:Pj8vaSbhAFVZN7D8Qx52hd5/LpFRVH
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\22072f995ce54648c2eac2113205914a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\22072f995ce54648c2eac2113205914a_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\jB01813NhNgP01813\jB01813NhNgP01813.exe"C:\ProgramData\jB01813NhNgP01813\jB01813NhNgP01813.exe" "C:\Users\Admin\AppData\Local\Temp\22072f995ce54648c2eac2113205914a_JaffaCakes118.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192B
MD505c647e7d20b69742f154402e6830038
SHA17264f2f3aa730e52e872ed7fd5bf319b8251ad3a
SHA2561537601c9939d4e5f4c766303d147fcda9e1d2b71befbd21e1c511d79d949bdd
SHA512500f31abaa3f9e790284d5261ed550734fa18b5207f43b3cd0c695b6ae8f74616994de63df4369aa1b0134e1a9e6a177e5e3505dcebb26b5bbab46d1f2f43997
-
Filesize
403KB
MD5190c2a61f4caccc2d07aafc4e3aec11d
SHA1c2a6defa17d43d94e25e91e7dd86afa14476fbdc
SHA25637312ff31f72ae040ae99c5ebae0876a1fc5c850fe73fe5bba8e84d2dbfe308c
SHA512f967dbe6d16294e1d25bfac7379021bdb1ff6dd33570b6fece5e83ac6cee82b2e3a4f545e0129d6201ddd86afb21cf3372622a96b1668442cf7346b32e80a852
-
Filesize
12KB
-
Filesize
820KB
-
Filesize
820KB
-
Filesize
820KB
-
Filesize
820KB
-
Filesize
820KB
-
Filesize
820KB