Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 06:11

General

  • Target

    407e91b8925011a1a37b6f0cd85c5f78_JaffaCakes118.exe

  • Size

    54KB

  • MD5

    407e91b8925011a1a37b6f0cd85c5f78

  • SHA1

    39f855ca2e7982adc263d6456d2040d4513a2222

  • SHA256

    14beb956f8faec182fc679f91099f1042cb99fd64991e54b9c341f5daa747b12

  • SHA512

    9ca5d426eadf35ee1375c0b2f2c9ac7d2c6e0b3c3de7528047984bb90b7fce80f7e68b366b963d6aa78f3bfb21447ac057bd5e9a827255c58f7277c1033ba8a6

  • SSDEEP

    1536:cXK0hKJW8JxQZpCC1AuIIOQIEv1Zt+AU1:clKg8J011AunOM9Zt+N1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\407e91b8925011a1a37b6f0cd85c5f78_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\407e91b8925011a1a37b6f0cd85c5f78_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\bassmod.dll

    Filesize

    9KB

    MD5

    780d14604d49e3c634200c523def8351

    SHA1

    e208ef6f421d2260070a9222f1f918f1de0a8eeb

    SHA256

    844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2

    SHA512

    a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b

  • memory/2540-0-0x0000000000400000-0x00000000004ABCC2-memory.dmp

    Filesize

    687KB

  • memory/2540-1-0x0000000000401000-0x000000000049B000-memory.dmp

    Filesize

    616KB

  • memory/2540-2-0x0000000000400000-0x00000000004ABCC2-memory.dmp

    Filesize

    687KB

  • memory/2540-4-0x0000000000400000-0x00000000004ABCC2-memory.dmp

    Filesize

    687KB

  • memory/2540-8-0x0000000000400000-0x00000000004ABCC2-memory.dmp

    Filesize

    687KB

  • memory/2540-10-0x0000000000401000-0x000000000049B000-memory.dmp

    Filesize

    616KB