Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    48s
  • max time network
    39s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 14:46

General

  • Target

    da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    da93e572718d1c2154e55a0a238ed673

  • SHA1

    82d9e925c889780faf06ef5525cb3abb8a0c88df

  • SHA256

    787f5e7ef2ffd3f642d62d68ae840fb5875158f25815dc32215b20760e7e7c3e

  • SHA512

    6ddaa8c71263e4b06cef10d5a755a4e38d7ae09a2cad89f6f65296c5dd7394272c69432cf5ee968334bea1eb0d3ce71b88b31bdd078b19f2bda1f2db6075df41

  • SSDEEP

    1536:K7UxyGtordZ1Z2qSDnoDUP3pNkM00M1NgqHTJKqO9O:grJSDnogP3u0M16GTJK59O

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2176-0-0x000007FEF616E000-0x000007FEF616F000-memory.dmp

    Filesize

    4KB

  • memory/2176-1-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-2-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-3-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-4-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-5-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-6-0x000007FEF616E000-0x000007FEF616F000-memory.dmp

    Filesize

    4KB

  • memory/2176-7-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB

  • memory/2176-8-0x000007FEF5EB0000-0x000007FEF684D000-memory.dmp

    Filesize

    9.6MB