Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 19:24 UTC

General

  • Target

    b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe

  • Size

    217KB

  • MD5

    b8d748d2b77b134b71ffca23055871c0

  • SHA1

    c2feaa03f2f212d3a2ee9d7d882dd9ce8d5df3fa

  • SHA256

    6d6366b05cc68b224d2a13c8841aa5f3b7356e1f6b8d8d28eea2d9d4bab40357

  • SHA512

    fe95144f8550591b1ea5db1b83e3cedf376bd3535324a2fe887f2a2419b26cfeac181fd23a4ab3213a91d1db7ca84c300deadda1baa5c6fea9a055c292bfbb5a

  • SSDEEP

    6144:upU0Myvcl/5+oEr9gYMaTz1++E7xMrSJ:uqXykTD2gYnIHCq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

  • flag-us
    DNS
    livedoor.com
    b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    livedoor.com
    IN A
    Response
    livedoor.com
    IN A
    147.92.184.22
  • flag-us
    DNS
    yieldmanager.com
    b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    yieldmanager.com
    IN A
    Response
No results found
  • 8.8.8.8:53
    livedoor.com
    dns
    b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
    58 B
    74 B
    1
    1

    DNS Request

    livedoor.com

    DNS Response

    147.92.184.22

  • 8.8.8.8:53
    yieldmanager.com
    dns
    b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
    62 B
    62 B
    1
    1

    DNS Request

    yieldmanager.com

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2220-0-0x00000000002E0000-0x0000000000304000-memory.dmp

    Filesize

    144KB

  • memory/2220-1-0x0000000000400000-0x0000000000439000-memory.dmp

    Filesize

    228KB

  • memory/2220-2-0x0000000000400000-0x0000000000439000-memory.dmp

    Filesize

    228KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.