Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/06/2024, 11:42

General

  • Target

    9e0eda00b4fa42623544448b1325eec0_JaffaCakes118.exe

  • Size

    46KB

  • MD5

    9e0eda00b4fa42623544448b1325eec0

  • SHA1

    8d3955c723d9bad9037a939d50c8c1a390ed6c08

  • SHA256

    40849d868ec38a96551189e170bcfa47afb49bdaae5e4f15adcd22c5d0a23efe

  • SHA512

    de513bfc7ed707d736c6f2daad95773ace18c8cde52122ecf352a8939917e50d752120e5877f898ee721c2b20a6b3a47c38bfe5a16c7a4ad8c1cc578dff8b01f

  • SSDEEP

    768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJcQdHmDu82q9N0HqgzHSNOYxy:6LXB65939tY6HBg4sXJcQdGkS8qcy45t

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\9e0eda00b4fa42623544448b1325eec0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9e0eda00b4fa42623544448b1325eec0_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:4540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsy4269.tmp\NSISdl.dll

    Filesize

    14KB

    MD5

    a5f8399a743ab7f9c88c645c35b1ebb5

    SHA1

    168f3c158913b0367bf79fa413357fbe97018191

    SHA256

    dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    SHA512

    824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977