Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    12s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 17:29

General

  • Target

    314e5a90840ddde6b197673f18c4b2db_JaffaCakes118.exe

  • Size

    261KB

  • MD5

    314e5a90840ddde6b197673f18c4b2db

  • SHA1

    cadd74fd99eef3a869014a23308ab0483bb679c9

  • SHA256

    470969ef6feb701e81671d9380a526ce522be4e8ec80ebf18cd499a0f2bfb448

  • SHA512

    c10f8973c65376bfede780b38e2d298cc850035f643fbcf04ef946062caa88b9d651d83bfda6835af818fe138bf3d669390a115fcdb013c8e8a91549cf69a88f

  • SSDEEP

    6144:rNr/ochd/zdJTbrLd4DVvpTiCJHYn2WwMMcR8Z7hWDCyO:rJ/ochxzdJTbrO9pTiCJY93MfZYOd

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\314e5a90840ddde6b197673f18c4b2db_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\314e5a90840ddde6b197673f18c4b2db_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\Microsoft\Windows\BrouseApllication.exe

    Filesize

    504KB

    MD5

    45c51f7736529664ec1361a798fb6597

    SHA1

    853c4a767bee450765e4a8f887739d777ddb1a1f

    SHA256

    b643f22da313351d8617fbd58ece7ac51ac94aa9224aa679ab87e4f210af08a4

    SHA512

    0b6a27356d3829c955ab46e1c7015431eba4a5fbd41cb3a672527230334f46e9cdf98f9b67a41ab4a5645208960d61f797603c91a4559d1fbcca633ba0a36262