Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 07:16

General

  • Target

    e1f69ae52fdedd722a87b6fe1927d94f_JaffaCakes118.exe

  • Size

    117KB

  • MD5

    e1f69ae52fdedd722a87b6fe1927d94f

  • SHA1

    bbf44dd7bf70e4872432bc82cb6cfac7de5d2aab

  • SHA256

    ddbb885db8467bbe75576bcbec3ac4081c73bea0bd08ea9197ad86db48639810

  • SHA512

    529be3abbb54be09b5b8f552aa0dad12e5fbc195d2a4ff43a8a4c22f531145dcdeee7b5fa7c8d971fbf29a40a6341ca3903bf4f81263cc6d26e9f7f7a1683df2

  • SSDEEP

    3072:0SXMaP2UgekLXP74WLV2c63O2jTwJIGKzD3kp:PcA2UPkLEIO3ZvwYP3A

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1f69ae52fdedd722a87b6fe1927d94f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e1f69ae52fdedd722a87b6fe1927d94f_JaffaCakes118.exe"
    1⤵
      PID:2096

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2096-1-0x0000000000270000-0x0000000000287000-memory.dmp

      Filesize

      92KB

    • memory/2096-0-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-2-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-3-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-4-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-5-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-6-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-7-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-8-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-9-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-10-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-11-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-12-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-13-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-14-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

    • memory/2096-15-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB