Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/05/2024, 18:36

General

  • Target

    4c7bfdf490d3215d498544503878581e_JaffaCakes118.exe

  • Size

    219KB

  • MD5

    4c7bfdf490d3215d498544503878581e

  • SHA1

    d2fba16b075690e9703c5e8b9744ed1288be3856

  • SHA256

    15672e3ebbf45b17694081c927cf51d7e2063242200819e7c624911b2ea6f08a

  • SHA512

    3a5ab3cb5ff20e44a0c80865a26e6aabd977dd5e9331d66733e4ccb05ad4237d49695deaa8a0a610a74e14cc53298c7177a5a3601dc5c4e5a1b8614e8c05e112

  • SSDEEP

    6144:o9ZjMGYL6l474wuIaFVjDulcZXIDXMKgA:A4j54w6FVHulcO8KgA

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c7bfdf490d3215d498544503878581e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4c7bfdf490d3215d498544503878581e_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:4692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4692-0-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/4692-3-0x0000000000EC0000-0x0000000000EC1000-memory.dmp

    Filesize

    4KB

  • memory/4692-2-0x0000000000EB0000-0x0000000000EB1000-memory.dmp

    Filesize

    4KB

  • memory/4692-1-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/4692-4-0x0000000000F20000-0x0000000000F40000-memory.dmp

    Filesize

    128KB

  • memory/4692-9-0x0000000000F20000-0x0000000000F40000-memory.dmp

    Filesize

    128KB

  • memory/4692-6-0x0000000001070000-0x000000000109F000-memory.dmp

    Filesize

    188KB

  • memory/4692-17-0x0000000000F20000-0x0000000000F40000-memory.dmp

    Filesize

    128KB