Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5e4b52e562...18.exe

windows7-x64

7

5e4b52e562...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 00:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5e4b52e562fec1b02c93a0712e9644af_JaffaCakes118.exe

  • Size

    148KB

  • MD5

    5e4b52e562fec1b02c93a0712e9644af

  • SHA1

    273ce0e86ed5f6ebb9f6c45955317f16dd756745

  • SHA256

    42dc7f1f53000f86d214a7a2accdf18676851b5754e19c047b41a72212792a24

  • SHA512

    25ba2c471219c1f9faf7fade0343a165bcc01077b649d66be2c606ae35c91c55dbf09f1c3f5766090facf642291220213f1ae7d4cb53e97f675bd24b0cd7c93e

  • SSDEEP

    1536:D6u3uYOXCfnaZySlhlG6alKNvxBxIJPrynJqioEHHJ2Rbb/1qqNMX/mpjTxDZrZC:egurCfnaZygG++azoA2vqq0my8Ds

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e4b52e562fec1b02c93a0712e9644af_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5e4b52e562fec1b02c93a0712e9644af_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:3688
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x470 0x410
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\bassmod.dll
    Filesize

    9KB

    MD5

    780d14604d49e3c634200c523def8351

    SHA1

    e208ef6f421d2260070a9222f1f918f1de0a8eeb

    SHA256

    844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2

    SHA512

    a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b

    Download Submit

  • memory/3688-0-0x0000000000400000-0x0000000000483000-memory.dmp

    Filesize

    524KB

    Download

  • memory/3688-1-0x00000000001D0000-0x00000000001D2000-memory.dmp

    Filesize

    8KB

    Download

  • memory/3688-6-0x0000000000400000-0x0000000000483000-memory.dmp

    Filesize

    524KB

    Download

  • memory/3688-8-0x00000000001D0000-0x00000000001D2000-memory.dmp

    Filesize

    8KB

    Download