Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
24/03/2025, 09:49
General
-
Target
JaffaCakes118_887f56ad5fdc010d057a00edebf7ff18.exe
-
Size
432KB
-
MD5
887f56ad5fdc010d057a00edebf7ff18
-
SHA1
ecb9c595573d0e2e636947d0b0513c99613ec353
-
SHA256
36cb13e32a0147c53a7a0b03450acf5a41a0fd07d205e9bcffd1806d9022870c
-
SHA512
1b0c37ebb9432040fe39be5d8b13b5c1e84383bd357643c5febcf114733a317d666d9ec0a6452cb6c214aafa1a98bcbf80d5d65438f61e42714a95c6390b3e84
-
SSDEEP
6144:JAeIifU8j6yy8+8B122EPKBJbOJhrSRdiPCtquPwWhNgJB1wLly3lY2Iusl+utOw:JRFj6pkCPKmJhrSSPCtT9awQ3lLIus+C
Malware Config
Signatures
-
CyberGate, Rebhip
CyberGate is a lightweight remote administration tool with a wide array of functionalities.
-
Cybergate family
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_887f56ad5fdc010d057a00edebf7ff18.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_887f56ad5fdc010d057a00edebf7ff18.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
384KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
384KB
-
Filesize
228KB
-
Filesize
1.1MB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
244KB