Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

2732c6d303...18.exe

windows7-x64

1

2732c6d303...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    125s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/07/2024, 23:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2732c6d303768ff5bb188e6e52b5b679_JaffaCakes118.exe

  • Size

    631KB

  • MD5

    2732c6d303768ff5bb188e6e52b5b679

  • SHA1

    a94aa48d62a9b7b8e4ba9045f0d96f1d4a1ca879

  • SHA256

    73661f4b3bae94046cf814d9475f137b64d5f84e2a3e31a62d0fec9015c32efa

  • SHA512

    6157a15b6aa80789e772f86c2731a19e7093f82d7076931cb43b70268fc04950443fa27ea0a53f5c5253affb6538d2ddcaf011fd349ef70d4e05ccf18a527c2d

  • SSDEEP

    12288:7NoFmw6FvnRuzg/axX7JY+eSUSuuFi4A547+8pVpDckHxYfplb:7Nlw8vnRuzg/axLJY+cSJFi4ACy8pVpE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2732c6d303768ff5bb188e6e52b5b679_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2732c6d303768ff5bb188e6e52b5b679_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2068
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3972,i,18261153038209191383,10347744459236715365,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
    1⤵
      PID:3208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
      Filesize

      576B

      MD5

      dd8977a1d14fdf7586f484f1f80d0f5e

      SHA1

      e49c4c4c9c991afe2141476b0d2ed789d4a8c84b

      SHA256

      962017786fe4a72d8c89bfc1019808f00486bc9c80a4e290165873b41c4b4a55

      SHA512

      9606dca27515b0c411a5ea9f93c2a143d191df8a83b1a62f21a44b3d378e756c5250ff6ebaff8afe456eca4b5b8df420529d05dcc6bcb8d39154ec08a6763964

      Download Submit