Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 04:32

General

  • Target

    e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe

  • Size

    520KB

  • MD5

    e93a6da5faf59525e1439d0883641676

  • SHA1

    d471a0d5384c7f578ec7a1833667fc1cc902ffc6

  • SHA256

    f17bc1a271e9eddc1db8bafcdddeabde6b724dcc4f18305faafcb920d9e31522

  • SHA512

    0789074da9ca1f2c47e970367356503f061c5706a1a63d50e9d96c4245de48766d632f7b44b63805e4a1f7903511750ae26abf1a112e6df97b1744c4d3685be4

  • SSDEEP

    12288:yjlwQqnhXCc20VLG91CDzguQktq9d6QTQhX3c2myxBThwp:yjlwQqhy0Va91QzgubqHqhnc2pXwp

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:3616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3616-0-0x0000000000400000-0x0000000000B6C000-memory.dmp

    Filesize

    7.4MB

  • memory/3616-2-0x0000000000400000-0x0000000000B6C000-memory.dmp

    Filesize

    7.4MB

  • memory/3616-1-0x0000000000400000-0x0000000000B6C000-memory.dmp

    Filesize

    7.4MB

  • memory/3616-3-0x00000000028B0000-0x00000000028B1000-memory.dmp

    Filesize

    4KB

  • memory/3616-4-0x0000000002900000-0x0000000002901000-memory.dmp

    Filesize

    4KB

  • memory/3616-5-0x0000000000400000-0x0000000000B6C000-memory.dmp

    Filesize

    7.4MB

  • memory/3616-6-0x00000000028B0000-0x00000000028B1000-memory.dmp

    Filesize

    4KB

  • memory/3616-7-0x0000000002900000-0x0000000002901000-memory.dmp

    Filesize

    4KB