Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/04/2024, 12:05

General

  • Target

    d33f3911bb80d867f022d0ae48e426c9_JaffaCakes118.exe

  • Size

    129KB

  • MD5

    d33f3911bb80d867f022d0ae48e426c9

  • SHA1

    58c0effa803692edfba3926f6c72381c2b326040

  • SHA256

    ab4e53950c0f5c143f27de56397526c19ae4a522f5789a4a3bdd3beff46fd0dd

  • SHA512

    fc2fea6101681ae15e0a96aa406a23efa2c081d75c60fcdac7e756440b44644f95b935628c16a444a22df2818c2d7678645b9faffe2959eba6bf6421aa5bc67c

  • SSDEEP

    3072:6Dg1ob8S0h0CTXYmvFMQ4b1LfIH6wz4oJnnsq2xc150:6sg8S0hYmuQ4pfpoJnnsjxC0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d33f3911bb80d867f022d0ae48e426c9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d33f3911bb80d867f022d0ae48e426c9_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3868-0-0x0000000000140000-0x000000000015A000-memory.dmp

    Filesize

    104KB

  • memory/3868-1-0x0000000000960000-0x0000000000968000-memory.dmp

    Filesize

    32KB

  • memory/3868-2-0x00007FFF18BF0000-0x00007FFF196B1000-memory.dmp

    Filesize

    10.8MB

  • memory/3868-3-0x00000000009A0000-0x00000000009B0000-memory.dmp

    Filesize

    64KB

  • memory/3868-4-0x00007FFF18BF0000-0x00007FFF196B1000-memory.dmp

    Filesize

    10.8MB