Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 00:00

General

  • Target

    23eeb0b084bec10f4553677c6848236b_JaffaCakes118.exe

  • Size

    256KB

  • MD5

    23eeb0b084bec10f4553677c6848236b

  • SHA1

    165bba1d058164c60060a8f2647fce3227b48841

  • SHA256

    712200fd383b2c608974902b8dd5989f2ef5dc232123904065d5e7bbaa4e4fb1

  • SHA512

    7105909657cd8a3483de6ebb114361970f910d9c5610b8a9c7632c34d6fc0534162cb426f423b6c2bfaaa69833f544fdfc5f427a104b29dd59505dd5bf8c55f9

  • SSDEEP

    6144:vRC2F8NXC796TB9vj48ZNkiQoNIOZisgFF02pM:vLeVQkTrvj46kt4IOeFFlM

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\23eeb0b084bec10f4553677c6848236b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\23eeb0b084bec10f4553677c6848236b_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
      dw20.exe -x -s 508
      2⤵
        PID:800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/800-170-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/800-174-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-0-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-9-0x00000000769D4000-0x00000000769D5000-memory.dmp

      Filesize

      4KB

    • memory/2196-10-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-11-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-13-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-12-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-15-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-14-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-16-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-17-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-18-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-20-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-21-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-19-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-24-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-28-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-32-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-31-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-30-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-29-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-27-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-26-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-25-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-23-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-22-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-33-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-34-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-35-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-36-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-45-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-47-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-71-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-70-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-69-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-68-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-67-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-66-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-65-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-64-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-63-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-62-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-61-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-60-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-59-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-58-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-57-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-56-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-55-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-54-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-53-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-52-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-51-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-50-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-49-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-166-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-168-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-167-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-48-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-46-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-44-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-43-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-169-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-42-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-41-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-40-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-39-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-38-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-37-0x00000000002A0000-0x00000000002D4000-memory.dmp

      Filesize

      208KB

    • memory/2196-171-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-172-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB

    • memory/2196-173-0x00000000769C0000-0x0000000076AD0000-memory.dmp

      Filesize

      1.1MB