Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2024, 17:01

General

  • Target

    fd351fbc25e4d04ea5f1f7c225b1a74e_JaffaCakes118.exe

  • Size

    9KB

  • MD5

    fd351fbc25e4d04ea5f1f7c225b1a74e

  • SHA1

    fb7df69af02ed6894fc5feac0720179356a49335

  • SHA256

    8e2f1bfc30416a68c701f42c717635b091c72d634793c4516602d52f1c999f7c

  • SHA512

    bf5d0eeebb075193f91d00dd80d9c2491d04c0791ab211b26135448c5932a7ae39dfb698e2844a16b68398cc1212f8ef08cbfa323f038e156862dfa721e27fe3

  • SSDEEP

    192:MBksu7m6N7oy1ojeMZZ3r93VnjdwqzD3yGeyTJ:a4xKjeMdFnhwq3CGeyT

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd351fbc25e4d04ea5f1f7c225b1a74e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fd351fbc25e4d04ea5f1f7c225b1a74e_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5016-0-0x0000000000660000-0x0000000000668000-memory.dmp

    Filesize

    32KB

  • memory/5016-1-0x0000000000D20000-0x0000000000D32000-memory.dmp

    Filesize

    72KB

  • memory/5016-2-0x00007FF973090000-0x00007FF973B51000-memory.dmp

    Filesize

    10.8MB

  • memory/5016-3-0x000000001B180000-0x000000001B1BC000-memory.dmp

    Filesize

    240KB

  • memory/5016-4-0x000000001B580000-0x000000001B590000-memory.dmp

    Filesize

    64KB

  • memory/5016-5-0x00007FF973090000-0x00007FF973B51000-memory.dmp

    Filesize

    10.8MB

  • memory/5016-6-0x00007FF973090000-0x00007FF973B51000-memory.dmp

    Filesize

    10.8MB