Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 07:25 UTC

General

  • Target

    44db5e80758c2751e700764fbd8cfdd3_JaffaCakes118.exe

  • Size

    684KB

  • MD5

    44db5e80758c2751e700764fbd8cfdd3

  • SHA1

    851d1f3cb59be37a27b2671fd864547bb3c0136e

  • SHA256

    e080122057a06acb60030966bafa4126d4d8682d771e3dfaa8b55a16d80b76df

  • SHA512

    bda0795751b482b141baec94c9d92e92781ec0a754779e1473098217df332acfa5afcc60cfefcaa131024ce0305ac9d8fda51b0dc86205aaed4e41757e5803ca

  • SSDEEP

    12288:4CCbv34Z87zMsPau0iKEqQ/ZnKwAxDWmQNPgCQVCJEZa+rUlynwMEcO:K687zZF0iKEqOZAFWmQ5LQQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\44db5e80758c2751e700764fbd8cfdd3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\44db5e80758c2751e700764fbd8cfdd3_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2504

Network

  • flag-us
    DNS
    top100.hotmail.ru
    44db5e80758c2751e700764fbd8cfdd3_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    top100.hotmail.ru
    IN A
    Response
No results found
  • 8.8.8.8:53
    top100.hotmail.ru
    dns
    44db5e80758c2751e700764fbd8cfdd3_JaffaCakes118.exe
    63 B
    116 B
    1
    1

    DNS Request

    top100.hotmail.ru

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2504-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2504-1-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.