Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    160s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/04/2024, 20:54

General

  • Target

    c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe

  • Size

    221KB

  • MD5

    c27f9ef19dda68ec27cafbe1e68c1f3d

  • SHA1

    cee3083f0f91d143f59c92468b91db20a57bbec5

  • SHA256

    ac738a28e64fd24a7c3a4bb335fcf5c76b2f6e4683fdb108f7767857a10955af

  • SHA512

    b519dc28d76a9ef601a3779062461b3e73925cd37ad779da642515040e48fe454a0d2b5cf06711d7919f3fd334b3618e4eafa66ee13e1b9a74b201c637d624ca

  • SSDEEP

    3072:FLhgj1KiLc3OIkSCiuYyIyu99eQH6v5pBzD05y5zU7H/Gv+hkkzb:FVa1KiLu/knijyIZ9V6v5jo5y5afIkzb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1056-0-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-1-0x0000000000550000-0x0000000000552000-memory.dmp

    Filesize

    8KB

  • memory/1056-2-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-5-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-6-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-7-0x0000000000550000-0x0000000000552000-memory.dmp

    Filesize

    8KB

  • memory/1056-8-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-9-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-10-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-11-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-12-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-13-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-14-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-15-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-16-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-17-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-18-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB

  • memory/1056-19-0x0000000000C30000-0x0000000000CD1000-memory.dmp

    Filesize

    644KB