Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    80s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2024, 12:06

General

  • Target

    a573721bac8c733f1c12f565a0f13425_JaffaCakes118.exe

  • Size

    341KB

  • MD5

    a573721bac8c733f1c12f565a0f13425

  • SHA1

    7bc3fde437ec620835aed454e46f0d9ed489f1f3

  • SHA256

    24bd6e44239e21ce59e11f486f3d7fc38a92ac59300e7df2dfee7a2a7f9f68d5

  • SHA512

    c8f1d819cfe067725ccf921ba9d9419b096b6b3d267c6d1cea554e5d63e038b42a34f853e1f47f7d6f6305cc327740d659473182e8d8ab0f235c0f939096ad83

  • SSDEEP

    6144:E1f3p4J7kSBQW1L9yM37MO6tEjsV+wD8+O7fy2my15THWf:Gh4l1L9DgOCuQ+Y3O7fyzcTHWf

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a573721bac8c733f1c12f565a0f13425_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a573721bac8c733f1c12f565a0f13425_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2984-1-0x00000000005C0000-0x00000000005C1000-memory.dmp

    Filesize

    4KB

  • memory/2984-2-0x00000000005D0000-0x00000000005D1000-memory.dmp

    Filesize

    4KB

  • memory/2984-0-0x00000000005B0000-0x00000000005B1000-memory.dmp

    Filesize

    4KB

  • memory/2984-3-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/2984-4-0x0000000000CB0000-0x0000000000CD9000-memory.dmp

    Filesize

    164KB

  • memory/2984-5-0x0000000001B70000-0x0000000001B9F000-memory.dmp

    Filesize

    188KB

  • memory/2984-9-0x0000000000CB0000-0x0000000000CD9000-memory.dmp

    Filesize

    164KB

  • memory/2984-16-0x0000000000CB0000-0x0000000000CD9000-memory.dmp

    Filesize

    164KB

  • memory/2984-12-0x0000000001BE0000-0x0000000001C07000-memory.dmp

    Filesize

    156KB

  • memory/2984-18-0x0000000000CB0000-0x0000000000CD9000-memory.dmp

    Filesize

    164KB

  • memory/2984-25-0x0000000000CB0000-0x0000000000CD9000-memory.dmp

    Filesize

    164KB