Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
16/06/2024, 21:04
General
-
Target
b532da663d8f52b8c0437782f48fcc4f_JaffaCakes118.exe
-
Size
372KB
-
MD5
b532da663d8f52b8c0437782f48fcc4f
-
SHA1
8f292cdaf43a14c35111905bf2c6b6f095a4ee8f
-
SHA256
2017fd352f39a9ffea3e2cf9efa1166e41fbeeeebd7c6c7a25aa18ad212db074
-
SHA512
82a5417ba29e0cb8e9e559f66f1eb6dcd0bd99d9c7a47debcc72a721df401fcc9c0aa6bffac7dbd87728c517ddbd708b89dd6344aa8c032934fde3c870d0caf0
-
SSDEEP
6144:1GkORa/mgnQXgZG9PvK6pu4Dx0DrQlqK3BvN+Vz1dbroBjQmafsQQRwbreMpYSZ:VOmmgnQb9K6pVD+QEK3BvN+mjQmafsQL
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b532da663d8f52b8c0437782f48fcc4f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b532da663d8f52b8c0437782f48fcc4f_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
267KB
MD550d7a4da5f1a4f2999b0178ccec1320d
SHA1443d543e7b8ffec0b84768728d38d8c285ec615f
SHA25628e40d56758faad7a04678a6a2628a10eaa8df9f63f49460a65d539262453245
SHA5120cdcb9e47db9e7c073381161386e9fddb19ab7848d456cbe26ab5ede44fd6ae04aab25c6dc438c458861651f1238e8ccb9976484c4d5e919cb25a5d52c165d7d
-
Filesize
40KB
-
Filesize
288KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB