Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
07/05/2024, 16:09
General
-
Target
21042869db5d55e5e0e9749bb316b399_JaffaCakes118.exe
-
Size
9.2MB
-
MD5
21042869db5d55e5e0e9749bb316b399
-
SHA1
2f749cd250ab450a49c27b48f937006464d8147b
-
SHA256
53dc39d4dceab4d1985446a5b7d44d97819f7707eed0eb1f11ac9a51149f9329
-
SHA512
8d4af13b390cfbafdfdbb990530ba5cad45bbc6339b030f5b5da8a3f5801c5bc2fcb5a455a57297157600c00c9b431ba79c791d5b5499254f27b0aa41cf0e264
-
SSDEEP
196608:9tM+0im9f7Gsil3dseZeURGLmyotO+CpoEEXBcv6tnn:9LfeURGBoUbpIXBHtn
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21042869db5d55e5e0e9749bb316b399_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\21042869db5d55e5e0e9749bb316b399_JaffaCakes118.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
860KB
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
64KB