Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2024, 13:54
Static task
static1
Behavioral task
behavioral1
Sample
ed939319665306f825b11a057122a758_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed939319665306f825b11a057122a758_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed939319665306f825b11a057122a758_JaffaCakes118.exe
-
Size
841KB
-
MD5
ed939319665306f825b11a057122a758
-
SHA1
a2beb7773504bc070c9abfb1a174ab54bfa6c217
-
SHA256
d7c7ed4aaed9b75a90722352618619a0bac9d744b175a88ac73133b854b2ec1f
-
SHA512
6df41d06298d306f80647596ed9479a3fe6a9da021dc5344315baa575cc55b77584c631cdd277fe7b80d02039fcb626e963752c3d88d5c4dfb936cb2c6e85d37
-
SSDEEP
24576:IdAzdlMHuWmAsb9ZC+uJbnZcQPmeA9LTN:IdAjRZV0nZcQ29XN
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 536 ed939319665306f825b11a057122a758_JaffaCakes118.exe 536 ed939319665306f825b11a057122a758_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
277KB
MD5e064b97b6a33ccf05b809bdc72a2e18b
SHA1d3a86e5e55e1de0e13c23fe1babaefcf4432ce2b
SHA25610d9487526b51c83a851f8349d4bd5a53c8b2c8db31ccf3a8565a7083898d7ec
SHA512ffb013014e9c80a8977d616b9701a22d58d48fea7d07837559866bf3d7cb6c1654435d16b2fd2d55568c13eff44f6c2cddbcc09c38c304a59b8bbbbef1607353