Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
15/05/2024, 11:18
General
-
Target
45ec08e6a8003cbbc3bebc0503183692_JaffaCakes118.exe
-
Size
2.7MB
-
MD5
45ec08e6a8003cbbc3bebc0503183692
-
SHA1
d6d4b66e0907a2d122f25451c336d06174ce5abb
-
SHA256
7dbdebfa13add61d2021eb8a2165978c9c714f7f369d50df02eea7919be61667
-
SHA512
b4a5b7f052f5e4018fbab67438372206bfe9b4ab4326c51827c9e1d4ac81e675bde11e8a59e30855ce204c3434c597db6e02f60af3072e5fe10ab2dd3beedeb9
-
SSDEEP
49152:oNmSmJD8cQ6yfvREnyM+FLnetdZWYSGYvg2xbX4g1QqYDFL:6ADjQ66ED+qWYSGm1FyrDFL
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\45ec08e6a8003cbbc3bebc0503183692_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\45ec08e6a8003cbbc3bebc0503183692_JaffaCakes118.exe"1⤵
-
C:\ProgramData\f5dee31fa2\a10372fc7f.exeC:\ProgramData\f5dee31fa2\a10372fc7f.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5f138d60a7bcc5925e0532e6161757959
SHA1431b3a71e1a63b8f511b4ef4c7064269be464332
SHA25691d42ed9ffc65b46bd2e676e1e0928bbbc022c36354e8b334d9001ec398a9563
SHA5129837e271ea0702c0cd471be0bc7a348813c6d9e399ff267fd01d7294c1ae607549bab159ac4700beb7e9488ff5ae12d57328be44cec482da3404ed2e8e175c68
-
Filesize
2.7MB
-
Filesize
8KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
20KB
-
Filesize
2.7MB
-
Filesize
20KB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
20KB
-
Filesize
4KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
2.1MB
-
Filesize
20KB
-
Filesize
2.1MB