Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 03:40

General

  • Target

    2480eb1e323ef95e1f27c4160e6560e2_JaffaCakes118.exe

  • Size

    279KB

  • MD5

    2480eb1e323ef95e1f27c4160e6560e2

  • SHA1

    509403dc01c7bfa9ad67a956d1fbbd55228ac816

  • SHA256

    069b0ff7f43effc364669f906ae6434623505bb0b59784c12dc885c21bc9e782

  • SHA512

    8f47004e408e537f56fab8a1268eaca5a8eab67c74b3d44ffea4fbf81f576bea247d6249f930cea8eb7437d6127a08587096ea601e665c7a79fa73210e854f03

  • SSDEEP

    6144:HOg7hprjhU+z3H9MGsN60N9VxooYThNfTG5B:HOg7hBlZbdhhK9rx9

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2480eb1e323ef95e1f27c4160e6560e2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2480eb1e323ef95e1f27c4160e6560e2_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:5112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu-13F8.dll

    Filesize

    266KB

    MD5

    92c042064317044bc612b6649d29b48b

    SHA1

    94886d93ac80fef3d2dc73ee8011781935606724

    SHA256

    0078138fbac022f9c1ddbf19a6c8abe8ccc918257c975208e405b746499be204

    SHA512

    2c4650246aea8e0c18dceaf718d634234b559a5a7c54721275f032c34508516d4d34f4858e0d52edd10a0ea878ca2235f2b973c506b2c95af7047aa05b78070c

  • C:\Users\Admin\AppData\Local\Temp\{44D3DAC5-7922-AE7F-9886-7D1F40FF2BB8}\_Setup.dll

    Filesize

    188KB

    MD5

    cf4d6fdf9ae0a9d46be62344891b947b

    SHA1

    5099c7836701644bd8dcf6a053d658a8f4d8d983

    SHA256

    a2feab6db63a377944e604fa5abe6254602cd3e3aa5a465942a237c6493b906d

    SHA512

    501174b7451f50c1425e044f45cdac7748fc939b1eb29a6d75d8ff64f5a8831434e8c49ed981e7a7a05984bab03cc9709686352e1c1ab6484f96217496405b30

  • C:\Users\Admin\AppData\Local\Temp\{44D3DAC5-7922-AE7F-9886-7D1F40FF2BB8}\_Setupx.dll

    Filesize

    28KB

    MD5

    228722b118082a17ea16789d2cc38ee1

    SHA1

    4d840f5eea2a71ea27f60fb235145a683650da80

    SHA256

    591c3695f1c11acd7f2d67b449bbd10f6a72457f7a27146c26ac4d79ad5b37d2

    SHA512

    a1cb62594c03e0832b0b671f602ca45deb059a326a176b8e6d294da490f61e7972a12447c41bcbb5da163a544e9a1160043b29866383131f8e6574ee13592dc8