Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 23:22

General

  • Target

    82508234cb857dbc4960f6a9776ac2a1_JaffaCakes118.exe

  • Size

    312KB

  • MD5

    82508234cb857dbc4960f6a9776ac2a1

  • SHA1

    917dd2ee42cd7d2d6517725654735be147806945

  • SHA256

    129ce3dcb130415854510500f5179d1b0b4d7724dadd26bd4563ee85c99ec038

  • SHA512

    12142d1419cb435443b217d4e0e9900f0fa6ca6f14e0aa03440a327ee19ced1d4fe22ce3d7986dea8d4bd396624c575765d2182673bc66b94ec43c7f41fd2cbe

  • SSDEEP

    6144:Mweks+CRE0mfLS8zW1Osdnp1PuJ938RYGk:JeknCO0mzS8Unpnk

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\82508234cb857dbc4960f6a9776ac2a1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\82508234cb857dbc4960f6a9776ac2a1_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\bhs72FD.tmp

    Filesize

    242KB

    MD5

    46abad63ed5a1a264515f158a08dd410

    SHA1

    96bf993cbf8245c2adcdf305f6f8b2e2579f5707

    SHA256

    7df243e7fef0e6894b7b5ca9ed12598c61ad92706d54b795c871ff32559199e7

    SHA512

    17d6d52b04ee0d29aa18ec7eacf468cf62414479165ce11bef23e1446780611ff41fb1f2b596f34e67c90e691d3ddece87f9acf26c4569b28df3d8dbdaa58243

  • memory/4596-7-0x00000000059E0000-0x00000000059EA000-memory.dmp

    Filesize

    40KB

  • memory/4596-3-0x00000000056B0000-0x00000000056F2000-memory.dmp

    Filesize

    264KB

  • memory/4596-4-0x0000000074630000-0x0000000074DE0000-memory.dmp

    Filesize

    7.7MB

  • memory/4596-5-0x0000000006010000-0x00000000065B4000-memory.dmp

    Filesize

    5.6MB

  • memory/4596-6-0x0000000005940000-0x00000000059D2000-memory.dmp

    Filesize

    584KB

  • memory/4596-0-0x000000007463E000-0x000000007463F000-memory.dmp

    Filesize

    4KB

  • memory/4596-8-0x0000000074630000-0x0000000074DE0000-memory.dmp

    Filesize

    7.7MB

  • memory/4596-9-0x0000000074630000-0x0000000074DE0000-memory.dmp

    Filesize

    7.7MB

  • memory/4596-11-0x0000000074630000-0x0000000074DE0000-memory.dmp

    Filesize

    7.7MB

  • memory/4596-10-0x0000000009120000-0x0000000009186000-memory.dmp

    Filesize

    408KB

  • memory/4596-20-0x000000007463E000-0x000000007463F000-memory.dmp

    Filesize

    4KB

  • memory/4596-21-0x0000000074630000-0x0000000074DE0000-memory.dmp

    Filesize

    7.7MB