Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/03/2024, 09:59

General

  • Target

    1f0fa1f0e65d4f362ca4b27f3404d0a3_JaffaCakes118.exe

  • Size

    78KB

  • MD5

    1f0fa1f0e65d4f362ca4b27f3404d0a3

  • SHA1

    e0210f496e9dbb845870410f1204669678de161e

  • SHA256

    f30aeeafd1e25b43ad5a15a789d1abc0329efe6ee518dd1298f7d962bf552afc

  • SHA512

    ddaa662aad1fe2a71dcb29608524268828bf2111db3bfe7007b682876096ceae45e03e03a3afebee8ed3da1256ef425806c41ca848ea5d1b99eb90cd82ddd3a7

  • SSDEEP

    768:AJni2nNwja/ELcDWS6LecabQd6a+yu1Zp+gvR+GKlrESFph8lhDPAs9h174VHuBw:AJiiNJ/EgCSAqtl/+RSBl9b74VHiv

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f0fa1f0e65d4f362ca4b27f3404d0a3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1f0fa1f0e65d4f362ca4b27f3404d0a3_JaffaCakes118.exe"
    1⤵
      PID:2316
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 220
        2⤵
        • Program crash
        PID:2128
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 224
        2⤵
        • Program crash
        PID:5084
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2316 -ip 2316
      1⤵
        PID:2892
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2316 -ip 2316
        1⤵
          PID:4132

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads