Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 11:29

General

  • Target

    630d04abfffc91df7d91e47d2b9afd81_JaffaCakes118.exe

  • Size

    237KB

  • MD5

    630d04abfffc91df7d91e47d2b9afd81

  • SHA1

    81a5b7e13dbde7df269dc5b44cd0a28ca5260452

  • SHA256

    4b56e349a82943922c588435161b3cbb3fc2655cff4784f066e8f4da16ca537d

  • SHA512

    87743873ce0fa70114a301901c480ee23f3b03f6b546c51404b4f1d931bcc9190436f00fc70c0b71b9690312f834e969c340374d848bd8a52a63568bf4757c3b

  • SSDEEP

    6144:Um7bY+WaQZPiI0FR/sJwvP6bQ7yMP+DE827IW3u2Z:TbJuPinT6b7MP+Dd2dea

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in Windows directory 1 IoCs
  • Modifies registry class 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\630d04abfffc91df7d91e47d2b9afd81_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\630d04abfffc91df7d91e47d2b9afd81_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Drops file in Windows directory
    • Modifies registry class
    PID:2992

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2992-0-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

  • memory/2992-1-0x00000000002A0000-0x0000000000314000-memory.dmp

    Filesize

    464KB

  • memory/2992-3-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

  • memory/2992-2-0x0000000000457000-0x0000000000458000-memory.dmp

    Filesize

    4KB

  • memory/2992-4-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

  • memory/2992-5-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

  • memory/2992-6-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB