Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

28aa7e4c6f...18.exe

windows7-x64

6

28aa7e4c6f...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    92s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 15:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    28aa7e4c6f6fe0b830ca693c0d34c67a_JaffaCakes118.exe

  • Size

    269KB

  • MD5

    28aa7e4c6f6fe0b830ca693c0d34c67a

  • SHA1

    6e529524daf17a3fe002a28e0513d9bed346828d

  • SHA256

    e1ad1886922663fff3f5b18d8834771591ebc80fa5f82d184a6268be23b843b5

  • SHA512

    b5b081fe247a353535a8ab46ea4ae10db661b008d7ca5065b34f85b7f779d85bf5807b52905f228bdea4904d1df9af3225d08269c41779fd285707d3f0f20650

  • SSDEEP

    3072:BbLiOqyJY2xeM111+8R1zdX1JieL6kTPQdOxBVlPddAWIBX5:pEV4eM13pRHX51VBdC5B

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\28aa7e4c6f6fe0b830ca693c0d34c67a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\28aa7e4c6f6fe0b830ca693c0d34c67a_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:5096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5096-0-0x0000000000400000-0x000000000044E000-memory.dmp

    Filesize

    312KB

    Download