Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 13:58

General

  • Target

    67d99101cfd187378d32c4c847c67f93_JaffaCakes118.exe

  • Size

    91KB

  • MD5

    67d99101cfd187378d32c4c847c67f93

  • SHA1

    1a85b81a108867a6fe0eacdf96756cf35a172ee3

  • SHA256

    2b9e7c321108e73a1a9f7e1a8a1613647e055e0c7ff622ff41470fbe14a71976

  • SHA512

    1c5232ec55496646afd1b61dfad85cf3506c878c7e61cf0fe051deb6c678eebb5989dd47cad7dd65cf2ba4042c9de6cedffe745136f169aabf0d73962327f88a

  • SSDEEP

    1536:1usfkCyzHSH2Gx5FCuqcUGpBfNcnleeWEFRkKRqGOd7:1u7CSxciuqPqBfNclhLkKRwp

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67d99101cfd187378d32c4c847c67f93_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\67d99101cfd187378d32c4c847c67f93_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:2116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\shluser.dat

    Filesize

    22B

    MD5

    5a05bd1550ba55d6dc76eb21f76cc251

    SHA1

    859f01377a318db562345ab327b2d5be005bc4b5

    SHA256

    b9cd5796dae2756b5d67029b12727ea3be97ad890193d5435b360a335d389722

    SHA512

    af1ee6eab8236f46cc49f918e53f17d3faa7d722e27a170ba3c3ddb5fd5944ca18ef63a260f0d6fbd9d95d0e8eac2256ecd1027872f67de2a2a44605f996771e

  • memory/2116-0-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB