Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 04:36

General

  • Target

    7f820a78386eaa4975a849585bc96a49_JaffaCakes118.exe

  • Size

    258KB

  • MD5

    7f820a78386eaa4975a849585bc96a49

  • SHA1

    ee4a0c48bbefc27137316993834f7547a10ff9e3

  • SHA256

    210a0714a43c33186b700e6090516aa42029f1ca4142a01c52c02fd2ca43cc8b

  • SHA512

    73bc348c7aee29d6915cbdd4d7bd01bdb8b5a9d11e8924cf8b51f60e5c69aaebb8bf504d6a12272d16c8ecb95a8a3ad4b337c3defc5ddebf10e650f17c438c57

  • SSDEEP

    6144:/mcPkfVklKgn2m5qOl2e0siaqXSNJ0OGmHv:/1sV6z0FsGXO0OGmHv

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7f820a78386eaa4975a849585bc96a49_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7f820a78386eaa4975a849585bc96a49_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1808-0-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/1808-2-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/1808-1-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB

  • memory/1808-3-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/1808-4-0x0000000000DE0000-0x0000000000E09000-memory.dmp

    Filesize

    164KB

  • memory/1808-9-0x0000000000DE0000-0x0000000000E09000-memory.dmp

    Filesize

    164KB

  • memory/1808-5-0x0000000001D00000-0x0000000001D2F000-memory.dmp

    Filesize

    188KB

  • memory/1808-16-0x0000000000DE0000-0x0000000000E09000-memory.dmp

    Filesize

    164KB

  • memory/1808-18-0x0000000000DE0000-0x0000000000E09000-memory.dmp

    Filesize

    164KB

  • memory/1808-12-0x0000000001D70000-0x0000000001D97000-memory.dmp

    Filesize

    156KB