Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 15:48
Static task
static1
Behavioral task
behavioral1
Sample
4256c4be280381dbf9b6bc6ac211242a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4256c4be280381dbf9b6bc6ac211242a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4256c4be280381dbf9b6bc6ac211242a_JaffaCakes118.exe
-
Size
260KB
-
MD5
4256c4be280381dbf9b6bc6ac211242a
-
SHA1
0ebc98fb27e5cb32912d688bd9f8dba65027f469
-
SHA256
f3213a7deef23f89a2554981f212105c95f5881c9c0d6c855201a38facb02ab7
-
SHA512
0e129601d530f8568bf2a439ae24476f3b5ab81e085c73771f40b2d135f0a8631391415c5d4c45ee48e37e958d9ccb5895c070eb47da3f3b777c5f7d8d5cc091
-
SSDEEP
3072:vF4Y49p6o7QXUOS8W4pcOljhKalpeTgylnkweQspcvb5JizzyCjvSuCYapAZ2A5:9iyo+WYbttpeckND8zyCrRCzpbt
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Windows\CurrentVersion\Run\0c0e05001b120f4f041904 = "C:\\Users\\Admin\\azsn.exe" 4256c4be280381dbf9b6bc6ac211242a_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2296 4256c4be280381dbf9b6bc6ac211242a_JaffaCakes118.exe