Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 02:06

General

  • Target

    2445051d662d48ebbc353b079200c631_JaffaCakes118.exe

  • Size

    144KB

  • MD5

    2445051d662d48ebbc353b079200c631

  • SHA1

    aa19e56245848863db6fe8ffd0d4b9d33a1d2885

  • SHA256

    addec28c814bd0598a89d148bb025b0687c6f77d365fb9d3e6910f3d3b9fe764

  • SHA512

    cff79660cb5786f13185225ef74d674cc4f5e94013014ab3eba6c737003d2546071b1380fc1d15aa9fe87ea55a60e47bb4e5252f211b01147577709fe765cc9a

  • SSDEEP

    3072:4FkqIlcxdGbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7bt1gtcwKMBh:OoHwvP6bQ7yMP+DE827x10lKI

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Modifies registry class 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2445051d662d48ebbc353b079200c631_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2445051d662d48ebbc353b079200c631_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    • Modifies registry class
    PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1624-0-0x0000000000400000-0x0000000000434000-memory.dmp

    Filesize

    208KB

  • memory/1624-1-0x00000000005F0000-0x0000000000620000-memory.dmp

    Filesize

    192KB

  • memory/1624-2-0x00000000005C0000-0x00000000005C2000-memory.dmp

    Filesize

    8KB

  • memory/1624-10-0x0000000002390000-0x0000000002391000-memory.dmp

    Filesize

    4KB

  • memory/1624-9-0x0000000002330000-0x0000000002331000-memory.dmp

    Filesize

    4KB

  • memory/1624-8-0x0000000002340000-0x0000000002341000-memory.dmp

    Filesize

    4KB

  • memory/1624-7-0x0000000002370000-0x0000000002371000-memory.dmp

    Filesize

    4KB

  • memory/1624-6-0x0000000002380000-0x0000000002381000-memory.dmp

    Filesize

    4KB

  • memory/1624-5-0x0000000002300000-0x0000000002301000-memory.dmp

    Filesize

    4KB

  • memory/1624-4-0x0000000002310000-0x0000000002311000-memory.dmp

    Filesize

    4KB

  • memory/1624-3-0x00000000005B0000-0x00000000005B4000-memory.dmp

    Filesize

    16KB

  • memory/1624-14-0x0000000000400000-0x0000000000434000-memory.dmp

    Filesize

    208KB

  • memory/1624-15-0x00000000005F0000-0x0000000000620000-memory.dmp

    Filesize

    192KB