Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 01:00
Static task
static1
Behavioral task
behavioral1
Sample
6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe
-
Size
382KB
-
MD5
6586651cc7b6588de7bdd38ead464f22
-
SHA1
27d21f935f7940939fe91d03a52298c2606d948e
-
SHA256
140c23fabef89e7d8797639694303a1ea0aee3f0aa8ee633c4e83464baec0721
-
SHA512
54c0d67237ea11b385d9353728a7acf9f5a25024ffad11e90d0a28d44da2d677313f3d1cf8433cdafc790dbba49e1a88d59d6bc685bc8eef087a0c480eb8ef6b
-
SSDEEP
6144:G4lRkAehaKuqT+FOMgZTGguQXVCkQpDBTkqJAtmeElTeRe0/NCgXiPVGi:GkWAehJuqTHZT5FQBlVREeKNvXYz
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2896 Setup.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28 PID 2028 wrote to memory of 2896 2028 6586651cc7b6588de7bdd38ead464f22_JaffaCakes118.exe 28
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
280KB
MD5a394877a49ea1be45553fd1cdd17ce22
SHA12d895b9ea8a2eb7f828cc0e76db1899a36f9d131
SHA25679ceac666e87c82a059f523c2106a09f28a5b2f907a317768b502efdf841738f
SHA512ee44f9c53e7c49fbe1f112daa10439c6b65bbdc09a8bae91a498c5d54e2758485bb9cc01fb4b3bd896e52c47cfd83b38775cbfff190dfaebbccb925aec04073c