Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 06:09

General

  • Target

    eabbb6f57dac51f65b7fa7ad44dc0c85_JaffaCakes118.exe

  • Size

    163KB

  • MD5

    eabbb6f57dac51f65b7fa7ad44dc0c85

  • SHA1

    70b89bb6eda284e71271f35497f0309cde69fea7

  • SHA256

    7907745f5df59442b6a80ceb8dfbcbf139c41580e5cfad5969c92090b0e711fa

  • SHA512

    fb57dad1ca7957ff11bd915e66035380daf0ab2c78c41592bc0c5b6f326b138940737279e04248497fc58972a805fd5d7583a917f59dfc40b84e3cd2f093ecd3

  • SSDEEP

    3072:+YIedBhNZAxdJIeQ7hqrw1o98PsMBv3MCmJp3SEsTKd7Fx:HI2fKx/8GcsMBvMCmJpCEy+D

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\eabbb6f57dac51f65b7fa7ad44dc0c85_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eabbb6f57dac51f65b7fa7ad44dc0c85_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2748-22-0x0000000000320000-0x0000000000362000-memory.dmp

    Filesize

    264KB

  • memory/2748-21-0x0000000000400000-0x000000000042E000-memory.dmp

    Filesize

    184KB

  • memory/2748-20-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/2748-19-0x00000000004A0000-0x00000000004A1000-memory.dmp

    Filesize

    4KB

  • memory/2748-18-0x00000000004B0000-0x00000000004B1000-memory.dmp

    Filesize

    4KB

  • memory/2748-17-0x00000000004C0000-0x00000000004C1000-memory.dmp

    Filesize

    4KB

  • memory/2748-16-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

    Filesize

    4KB

  • memory/2748-15-0x0000000001FB0000-0x0000000001FB1000-memory.dmp

    Filesize

    4KB

  • memory/2748-14-0x0000000001FC0000-0x0000000001FC1000-memory.dmp

    Filesize

    4KB

  • memory/2748-13-0x0000000001F90000-0x0000000001F91000-memory.dmp

    Filesize

    4KB

  • memory/2748-12-0x0000000001FA0000-0x0000000001FA1000-memory.dmp

    Filesize

    4KB

  • memory/2748-11-0x0000000001F50000-0x0000000001F51000-memory.dmp

    Filesize

    4KB

  • memory/2748-9-0x0000000001F60000-0x0000000001F61000-memory.dmp

    Filesize

    4KB

  • memory/2748-8-0x0000000000430000-0x0000000000436000-memory.dmp

    Filesize

    24KB

  • memory/2748-7-0x0000000000440000-0x0000000000442000-memory.dmp

    Filesize

    8KB

  • memory/2748-6-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/2748-5-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2748-4-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2748-3-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2748-2-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2748-1-0x0000000000320000-0x0000000000362000-memory.dmp

    Filesize

    264KB

  • memory/2748-0-0x0000000000400000-0x000000000042E000-memory.dmp

    Filesize

    184KB