Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

357389c877...18.exe

windows7-x64

3

357389c877...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 16:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    357389c8775ab8a556851b0dad5a0a85_JaffaCakes118.exe

  • Size

    91KB

  • MD5

    357389c8775ab8a556851b0dad5a0a85

  • SHA1

    03fa87eae479a73bc2990b0878fda43202a8d644

  • SHA256

    a953d0cb24588d2449f6fa9bd6e1eff21a1b1c0e2c59b7f0c9d618ec1423281d

  • SHA512

    33de71aa9140ead7d349f21ffb87982ec477b661b15c802ed57064d434ca872e57eb4656d8b5ad3c653b7f314100b305bc63fb61afb526de0bb7bd888400eb2d

  • SSDEEP

    1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sd4:gfsewY/S8y4Qh5L58AKXbnfdywW

Score
7/10
persistenceupx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\357389c8775ab8a556851b0dad5a0a85_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\357389c8775ab8a556851b0dad5a0a85_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    PID:4388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4388-0-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download

  • memory/4388-1-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download

  • memory/4388-3-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download