Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
13/05/2024, 15:46
General
-
Target
4039be7049fb69b3963fd3ab58fbadda_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
4039be7049fb69b3963fd3ab58fbadda
-
SHA1
fe0244b0f84fd9634aba5d5569ac7c9a63423dcb
-
SHA256
04e872949ef3c44e485063dbb15bcda95a6aed434555d82e7b979532a34773c2
-
SHA512
2d3e3d39a8477ef4b727294b3640a11b68af02c127deb3178897d95dd76da131017115ee35ff380a088458ba77dad36d67f71e2e4bba17bcc6c3fd2bf7936feb
-
SSDEEP
24576:FWvknOMEfAvEOq6YMuWSVgU9QiTJk3NoDRYh08vy5mnrGJ+T:FUeOMmx6YBWSVgU9Q+oN0u1ami+T
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 6 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4039be7049fb69b3963fd3ab58fbadda_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4039be7049fb69b3963fd3ab58fbadda_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\a2JcF9HfKY\4E4h7zi1\Setup.exeC:\Users\Admin\AppData\Local\Temp\a2JcF9HfKY\4E4h7zi1\Setup.exe --relaunch2⤵
- Executes dropped EXE
- Modifies Internet Explorer settings
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD54039be7049fb69b3963fd3ab58fbadda
SHA1fe0244b0f84fd9634aba5d5569ac7c9a63423dcb
SHA25604e872949ef3c44e485063dbb15bcda95a6aed434555d82e7b979532a34773c2
SHA5122d3e3d39a8477ef4b727294b3640a11b68af02c127deb3178897d95dd76da131017115ee35ff380a088458ba77dad36d67f71e2e4bba17bcc6c3fd2bf7936feb
-
Filesize
1.1MB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB
-
Filesize
1016KB