Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

075d831a79...18.exe

windows7-x64

4

075d831a79...18.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    142s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 15:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    075d831a7914467be7316eca12d6bd1b_JaffaCakes118.exe

  • Size

    96KB

  • MD5

    075d831a7914467be7316eca12d6bd1b

  • SHA1

    917d48770292f85d62c7f96d2a84c5fe300f96c7

  • SHA256

    18eee8d8824fe78e5b676f3ebdb44d452ca939b61408a86dde90ae0e61c77543

  • SHA512

    2de5f9dfa7208d7f0be0da53aa7151dc63c0aae3cd1bd13c70e02ec7f320cf87161552fd8ac6f0ef47cceb35258fdd3e6fcec950ae830a87580002ff4963e65c

  • SSDEEP

    768:rmpdE1Gg+W5nO4rGQzTGfmgc33emu4v/eo4z7VP7LdGSu2HyTAzfMgTAzfM0CA:ruddQVgd54v

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\075d831a7914467be7316eca12d6bd1b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\075d831a7914467be7316eca12d6bd1b_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2332
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1328 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2948

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2332-0-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

      Download

    • memory/2332-1-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

      Download