Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
25/05/2024, 03:43
General
-
Target
70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.exe
-
Size
2.9MB
-
MD5
70c1e98224923d5b1b207bf00f0b61ef
-
SHA1
65a65486947c841d289ea50a55cf860a9ec85633
-
SHA256
7fe3f652523ec68d83ec10dbe0905ce2ae2a662640cebd26f9b67b93320074d1
-
SHA512
02557e7365bfc626fc5dd465ff293116ef301a64017eca1066b053c63c9a2c38f343012071bf1cf1c2fc0189095e89f2bf4f54eebf1c44a0219908aa6608ee23
-
SSDEEP
49152:KcD0uIqArw1nm8+6UGHklQmpt7QCWOkshGlTUTU2ZgeWGQH6/qWQMRFOf:HD0u8c1nrRUYklQmf7hkuGlwTfWZHo5s
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-NJ45H.tmp\70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.tmp"C:\Users\Admin\AppData\Local\Temp\is-NJ45H.tmp\70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.tmp" /SL5="$A01D2,2670771,140800,C:\Users\Admin\AppData\Local\Temp\70c1e98224923d5b1b207bf00f0b61ef_JaffaCakes118.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD5eeede3f88b35f1f850b1516b596d3e28
SHA1f13e556a1cbb353889b13bc62bb8837080f47c5a
SHA2564f31c4ebd07b060752c49cd8bda5e53144fdc3f0a15e8e942a4a7cc053cd323c
SHA512cae74afdd1314672ec2e0d9c2314094d05755262d031a2f83dc108146b24e2fa86e11d8ca519194e6a0cc16ad7f37b36856778714a7e97c5e4294bf4674b589d
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
180KB
-
Filesize
2.3MB
-
Filesize
88KB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
180KB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
1.2MB
-
Filesize
1.2MB