Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

46832df9f7...18.exe

windows7-x64

6

46832df9f7...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/07/2024, 15:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    46832df9f7b57686f516d70206f75404_JaffaCakes118.exe

  • Size

    462KB

  • MD5

    46832df9f7b57686f516d70206f75404

  • SHA1

    b9bea8dd0bdcfd26b0e575fedecda646e980f844

  • SHA256

    87ee5b0b636eda22ef7de0763cdf88a2c6f271db0bb920c636ceeb3a2d88c4ce

  • SHA512

    88a8a348db2c081a6475e4f69f8d3b32a25e921c29c2975e7fa7180dcf8586b2e3b288393eea7a28c582decc203a880230a460bf6813bebde409fdd78515bf4d

  • SSDEEP

    12288:Li9lolmDTpeQiW95OyRrCHTkjrFrU/Owj0Wp91a79Sj:DqT0QimOUccU/Owj9a7A

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\46832df9f7b57686f516d70206f75404_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\46832df9f7b57686f516d70206f75404_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:4496

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads