Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
13/07/2024, 21:03
General
-
Target
4354ae5294f09261ab5678fb2221c9c0_JaffaCakes118.exe
-
Size
220KB
-
MD5
4354ae5294f09261ab5678fb2221c9c0
-
SHA1
dd342a6245254bd73a49b23b8ef93aa0e28e2d1c
-
SHA256
29fcc132c41cddc2dcd9429e31f4aabb7283c53ebdd9c1a9409f7123bbcde850
-
SHA512
fe9bda763ffa3ed7f12779baec04211dc78cf8f4ab5243e6630eeb15c3ff62c225a195f7d75d265ffb1770bb70764549a1a7fe73e428a3a853bca9e580dbc2b7
-
SSDEEP
3072:VuS3u8KLoPLjmRTSXPUkdXz9qJ7MNDsZpznTWPiaFSeSGPFcPRP8RMYym6IWEgDf:sVWLjuIBz98LPq0iRMYymRWFD
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4354ae5294f09261ab5678fb2221c9c0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4354ae5294f09261ab5678fb2221c9c0_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
380KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
1000KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
736KB
-
Filesize
328KB
-
Filesize
380KB