Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
20/07/2024, 02:08
General
-
Target
5ea167b7fec3bc97a5551bd52428f4fe_JaffaCakes118.exe
-
Size
33KB
-
MD5
5ea167b7fec3bc97a5551bd52428f4fe
-
SHA1
6ac42bac7eea80096611de823fd0afa2b82380f0
-
SHA256
427591c6c406664f5b396c1d32c9df37610e7910d01a28741fda966fce150cad
-
SHA512
bb928c752973a308829b2df58156f9a1ddd7c5359d2e3a9b132a77bea023c2d9bde7d1aa5a6fa22580e62b89f22daef68e557703f9bfd61bd05e0fdcf744e9db
-
SSDEEP
768:hoR26sTm5fMj91Fp0sclX+x2AYVLd1ruQG+7uqXs:CR+T+fg1I7lXQ7+Ld1rM+7uAs
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 3 IoCs
-
Modifies Control Panel 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ea167b7fec3bc97a5551bd52428f4fe_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5ea167b7fec3bc97a5551bd52428f4fe_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\sysload.comC:\Windows\system32\sysload.com2⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops file in System32 directory
- Modifies Control Panel
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD55ea167b7fec3bc97a5551bd52428f4fe
SHA16ac42bac7eea80096611de823fd0afa2b82380f0
SHA256427591c6c406664f5b396c1d32c9df37610e7910d01a28741fda966fce150cad
SHA512bb928c752973a308829b2df58156f9a1ddd7c5359d2e3a9b132a77bea023c2d9bde7d1aa5a6fa22580e62b89f22daef68e557703f9bfd61bd05e0fdcf744e9db
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB