Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

4362dd7bbd...18.exe

windows7-x64

1

4362dd7bbd...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 21:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4362dd7bbd6f0fa6934a9f8060a246c4_JaffaCakes118.exe

  • Size

    58KB

  • MD5

    4362dd7bbd6f0fa6934a9f8060a246c4

  • SHA1

    20059d2145a0d1bd06f53b551c6360f0ce930405

  • SHA256

    bc8f0cb2adc812bdcdff39f02b4a38a4cf3f83b3deee0e11147ebb6544d78e94

  • SHA512

    e8ef369ebbbc96ec72572b44419b5a55a6ad0965021dbf7fc380f1baee4350dd82b458569c6e9e05f9fd1e8992240a7f8e527c05ac6c52f1a54cd1b27c413199

  • SSDEEP

    768:ts85isL1//9XJJtr6SUJyvud2bqK08N+53yNUUXfFBUlZfu5lSVxSrTNFh1/RdBG:t3iOXJJraw08N+5CN5BYZfbSDE

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4362dd7bbd6f0fa6934a9f8060a246c4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4362dd7bbd6f0fa6934a9f8060a246c4_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1752-0-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

    Download