Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 14:29

General

  • Target

    d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe

  • Size

    126KB

  • MD5

    d2267b9bbd65749777bf114bcad62c64

  • SHA1

    a4a7899b87ce2295f68bee63aa621e0ff1cca131

  • SHA256

    1d08ef18b0951e4e5fd671616d4bae4ed1c0af324cc6e18316b4fd2b57074957

  • SHA512

    192b0905557fbe78ae9df218c1f4dda1a43aead0f31709eecefad19dd4aecb0452a5818a252831f20b19ba8f0c9b1117a2df85c8910777e2e264ed5af37deed7

  • SSDEEP

    3072:lZamXVX7wJ1gmc7RauDYSaLbGb+1F2q1+7ikfPa7qeXrIyU6V:75ryt+aCQbyS2q1+7vfS7RrIyU6V

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\bassmod.dll

    Filesize

    33KB

    MD5

    e4ec57e8508c5c4040383ebe6d367928

    SHA1

    b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06

    SHA256

    8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f

    SHA512

    77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822

  • memory/2220-15-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-19-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-7-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-6-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-9-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-11-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-5-0x0000000000400000-0x0000000000499000-memory.dmp

    Filesize

    612KB

  • memory/2220-13-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-17-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-3-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-21-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-23-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-25-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-27-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-29-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2220-31-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB