Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
22/08/2024, 23:01
General
-
Target
b967f66baaae44b4aeb1514d60d4c622_JaffaCakes118.exe
-
Size
5.0MB
-
MD5
b967f66baaae44b4aeb1514d60d4c622
-
SHA1
b782d01b9a58d486da28fb0c283a60091da1c0cb
-
SHA256
90358a198f7069fc2f73e6fa0d393205370abdd1cab1f7a0822077be268e22d6
-
SHA512
382c3ee39dbdc8e15e99d018cb89ca49a287b5ffe4912c83e942b42eb331ca9a30907d311bec7c860981043919bef4106421e7a20b2001386bbc761c90ae8c03
-
SSDEEP
98304:n/pt8p7ilY9CQEcKz+kSixJvzwZeK2goiGR:H8p7iy39KqQv43q
Malware Config
Signatures
-
UPX packed file 30 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 44 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b967f66baaae44b4aeb1514d60d4c622_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b967f66baaae44b4aeb1514d60d4c622_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB