Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
26/07/2024, 15:59
General
-
Target
74bafc6ab4b3de3ef2a917280cde1d14_JaffaCakes118.exe
-
Size
125KB
-
MD5
74bafc6ab4b3de3ef2a917280cde1d14
-
SHA1
90ee37ee26c8c526ece7a8957079f975572842d1
-
SHA256
d2aaa75e24e3e9555f6b42c15f45d07bc79259ee5faca7d3959327da6e196d44
-
SHA512
31639ec5e8b79e9ac685a20ff9c0bd058e9661f64447a31c5d9c122731ed77c7e38db0224d4ff159316208bea46e1dc0b15f0ae15967c4f4f092ffe2978684f6
-
SSDEEP
3072:r20DaedBsMmU2K9/XgzOTDTp3CTbYsKRk:r20Gednm6azOTFEPKRk
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74bafc6ab4b3de3ef2a917280cde1d14_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74bafc6ab4b3de3ef2a917280cde1d14_JaffaCakes118.exe"1⤵
- Modifies WinLogon for persistence
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
MD5ece442e02a216a3e74e3b0694f54d9fd
SHA17b6b76dec2a64600737d512813b8f55c966c32ed
SHA2565509707bec627bca30439ce43f0d899664535cecbad1afda8611a4e5350c7107
SHA5128cd2575e29e6307b15dd8224bb92f6351c3a1c133bc5346f8dd2c5c13133827888dbb6d4e9262e5f68c9a43c37facd559fab7990605ffe2238a6296f6176faf1
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
104KB
-
Filesize
360KB
-
Filesize
360KB
-
Filesize
104KB