Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 15:30

General

  • Target

    3551968794b1acd6aed770a9742308c5_JaffaCakes118.exe

  • Size

    453KB

  • MD5

    3551968794b1acd6aed770a9742308c5

  • SHA1

    f1a175edf2973a11fbc03d64a099d3bbb9086e71

  • SHA256

    48882831a3eb10671f86d7728b219297d8e77def114b6fa78028a40bc98fd9a1

  • SHA512

    0b52d9872f71c01ed7c0ed1763d08496c193ac53baa6443b17d817aa3288930e94e4256357b583cc5b941fbe4025b92ab80930dac8bd6a4f4937eaaad351ebac

  • SSDEEP

    12288:PTLKHmDM3XA/VvNbgQd/gfe7HfvrhrD+Yr:Pfww91bfT7/DZaY

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3551968794b1acd6aed770a9742308c5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3551968794b1acd6aed770a9742308c5_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2324-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2324-41-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-60-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-65-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2324-80-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-105-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-124-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-143-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-164-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-187-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-206-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-227-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-250-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-269-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-290-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB

  • memory/2324-309-0x0000000000400000-0x0000000000478000-memory.dmp

    Filesize

    480KB