Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 01:08 UTC

General

  • Target

    dd611ca2d7632c947b65d66f677e1884_JaffaCakes118.dll

  • Size

    48KB

  • MD5

    dd611ca2d7632c947b65d66f677e1884

  • SHA1

    6bc2ec8c3edaa06aa7413d8dc9274a5fc4c72c8b

  • SHA256

    c55671c4b0c7f2d8566ff4a76585bc13f4ef8cbad8261c763ce91b88b12546d1

  • SHA512

    c957831e8e535aba671fd0fb266f36e70465cb91624950119c6549fdb671098d76587ed211228a8f921be9f93551016c459e0b0adc95cfcb2f00ec1256a6fc12

  • SSDEEP

    768:f7XcHKKuEnV161lHAtjmy7fyivy4llafmp5kEdRof7EKTwx8IZ2PbgeMIUmftx7:f7MHXuEnV16mxmyTZamHCTwW/jUmftx7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\dd611ca2d7632c947b65d66f677e1884_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2648
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\dd611ca2d7632c947b65d66f677e1884_JaffaCakes118.dll,#1
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2688-1-0x0000000010000000-0x0000000010021000-memory.dmp

    Filesize

    132KB

  • memory/2688-0-0x0000000010000000-0x0000000010021000-memory.dmp

    Filesize

    132KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.