Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/06/2024, 21:40

General

  • Target

    0abefa959d7fefcf774cb4939d80ab4c_JaffaCakes118.exe

  • Size

    4.0MB

  • MD5

    0abefa959d7fefcf774cb4939d80ab4c

  • SHA1

    8337e5fa621f51a3a0c8c8c4ff6f23057799d3a7

  • SHA256

    f7c93dc51bd435cd781dd1de104611865720554e6e3bff504dde7b53f2d35b4d

  • SHA512

    b7c429521024c8b355d79efe6927d480ff511a48782c5529c8709efc89ed803120dbd37532f5976f230ea3bcab8b74cfc8bc0d696fdb4718be09a15d7b5450ac

  • SSDEEP

    768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4X:tjrAX5NjJHJ+oFE2M/4X

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0abefa959d7fefcf774cb4939d80ab4c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0abefa959d7fefcf774cb4939d80ab4c_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:1868
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4276,i,2607710392823067546,4648797561512801463,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
    1⤵
      PID:4300

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe

      Filesize

      5.7MB

      MD5

      b647018654fad62a2032df96f6b818bc

      SHA1

      d26050a153757c2bfba95755ca2bbe4b91fe101f

      SHA256

      f5cd2f996e0a75063c4fbcd236f8a665f512e7303a0db55aa284910353ef8bda

      SHA512

      7ffbc4101bedff3037262b78b1bfd6a603e6416e3cf1f0b48a6d0b0cf113792b1396ec928a96e0794c4f12f7d1a8f1c05b2cda5b9b4737110decc8239e084dea