Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/06/2024, 21:51

General

  • Target

    b04647bd0718afd8c11cd417989dbbbd_JaffaCakes118.exe

  • Size

    219KB

  • MD5

    b04647bd0718afd8c11cd417989dbbbd

  • SHA1

    e835ca4bf06ff1833a9384c52e0a476a8fc30597

  • SHA256

    a2d1c5e464e39868d32b5918c9c44dc995e30e9896c7db4d3436111e2347607a

  • SHA512

    2f34ba22dfeb6f24edbf9ac3ffd239e4220aa8b8456f7591ae6167f8466e30158dc3b399e481a4fee4750af0ee9b92aa36e29ec776f9a42c0126e6855256fe41

  • SSDEEP

    6144:crOm88KNj9RAOdXemeyf5rUF1+IOT5920L:c6m2NRCO1eyhUX+IOa0L

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b04647bd0718afd8c11cd417989dbbbd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b04647bd0718afd8c11cd417989dbbbd_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3008-0-0x00000000001A0000-0x00000000001D2000-memory.dmp

    Filesize

    200KB

  • memory/3008-5-0x00000000001A0000-0x00000000001D2000-memory.dmp

    Filesize

    200KB

  • memory/3008-1-0x00000000008C0000-0x00000000008EF000-memory.dmp

    Filesize

    188KB

  • memory/3008-14-0x0000000003490000-0x00000000034B7000-memory.dmp

    Filesize

    156KB

  • memory/3008-18-0x00000000001A0000-0x00000000001D2000-memory.dmp

    Filesize

    200KB

  • memory/3008-20-0x00000000001A0000-0x00000000001D2000-memory.dmp

    Filesize

    200KB

  • memory/3008-21-0x00000000001A0000-0x00000000001D2000-memory.dmp

    Filesize

    200KB