Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 10:36
Static task
static1
Behavioral task
behavioral1
Sample
4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118.js
Resource
win7-20240708-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118.js
Resource
win10v2004-20240709-en
7 signatures
150 seconds
General
-
Target
4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118.js
-
Size
150B
-
MD5
4969f8916c7b2d08173c9d8214f4200c
-
SHA1
aeba793b1ff57f6273968ad1c1688cb1aa5e2df8
-
SHA256
81c96a889f6095e84ff6b8bf1d48eb524c4ed5fa3a013e335864ab1fb71133f2
-
SHA512
e91829594fbc683e6df43548b774c158343ee1ae26abb5158ca1b23e50558f54a1208d31426fcfaf486355682b5ede03abe52a93125a50bbd341ad29d2d3bd52
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1544 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1544 powershell.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2368 wrote to memory of 1544 2368 wscript.exe 30 PID 2368 wrote to memory of 1544 2368 wscript.exe 30 PID 2368 wrote to memory of 1544 2368 wscript.exe 30
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118.js1⤵
- Suspicious use of WriteProcessMemory
PID:2368 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" $ff = curl https://google.com;2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1544
-