Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 05:45

General

  • Target

    2b300bcb07e5a08313cb74fc29fc08e8_JaffaCakes118.exe

  • Size

    809KB

  • MD5

    2b300bcb07e5a08313cb74fc29fc08e8

  • SHA1

    88108d6b27a5382db9aef957f91b6948b54610b2

  • SHA256

    43707090572d8fe9c309cb973aa43ecafcce275060cc22851f059ab1d75dd395

  • SHA512

    bdc2835cb399d1306e10166516361a196cff0c0d3bccd76dccdfb55cb9030cec22adeda8f2d3fa61e0a7d79b5668845f0c64f930cedd1e44b5f4f2ab86c2b751

  • SSDEEP

    12288:Zy9DCejKbDSlKx4K2QE8O0rAp1ZlMJ0GKhHb3LsotfQunka1KNaT5:ZyJR4i8Ou63MWrHbwoFBkk9

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b300bcb07e5a08313cb74fc29fc08e8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2b300bcb07e5a08313cb74fc29fc08e8_JaffaCakes118.exe"
    1⤵
    • Checks processor information in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3032-0-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-1-0x00000000009A0000-0x00000000009E4000-memory.dmp

    Filesize

    272KB

  • memory/3032-8-0x0000000000970000-0x0000000000971000-memory.dmp

    Filesize

    4KB

  • memory/3032-7-0x00000000024A0000-0x00000000024A1000-memory.dmp

    Filesize

    4KB

  • memory/3032-6-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/3032-5-0x00000000024C0000-0x00000000024C1000-memory.dmp

    Filesize

    4KB

  • memory/3032-4-0x0000000000950000-0x0000000000951000-memory.dmp

    Filesize

    4KB

  • memory/3032-3-0x0000000000960000-0x0000000000961000-memory.dmp

    Filesize

    4KB

  • memory/3032-2-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/3032-9-0x00000000009F0000-0x00000000009F1000-memory.dmp

    Filesize

    4KB

  • memory/3032-11-0x0000000002550000-0x0000000002553000-memory.dmp

    Filesize

    12KB

  • memory/3032-10-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/3032-33-0x00000000026E0000-0x00000000026E1000-memory.dmp

    Filesize

    4KB

  • memory/3032-62-0x00000000029B0000-0x00000000029B1000-memory.dmp

    Filesize

    4KB

  • memory/3032-61-0x00000000029C0000-0x00000000029C1000-memory.dmp

    Filesize

    4KB

  • memory/3032-60-0x0000000002990000-0x0000000002991000-memory.dmp

    Filesize

    4KB

  • memory/3032-59-0x00000000029A0000-0x00000000029A1000-memory.dmp

    Filesize

    4KB

  • memory/3032-58-0x0000000002970000-0x0000000002971000-memory.dmp

    Filesize

    4KB

  • memory/3032-63-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB

  • memory/3032-57-0x0000000002980000-0x0000000002981000-memory.dmp

    Filesize

    4KB

  • memory/3032-56-0x0000000002950000-0x0000000002951000-memory.dmp

    Filesize

    4KB

  • memory/3032-55-0x0000000002960000-0x0000000002961000-memory.dmp

    Filesize

    4KB

  • memory/3032-54-0x0000000002930000-0x0000000002931000-memory.dmp

    Filesize

    4KB

  • memory/3032-53-0x0000000002940000-0x0000000002941000-memory.dmp

    Filesize

    4KB

  • memory/3032-52-0x0000000002910000-0x0000000002911000-memory.dmp

    Filesize

    4KB

  • memory/3032-51-0x0000000002920000-0x0000000002921000-memory.dmp

    Filesize

    4KB

  • memory/3032-77-0x0000000000404000-0x0000000000405000-memory.dmp

    Filesize

    4KB

  • memory/3032-76-0x0000000002DE0000-0x0000000002DE1000-memory.dmp

    Filesize

    4KB

  • memory/3032-75-0x0000000002DF0000-0x0000000002DF1000-memory.dmp

    Filesize

    4KB

  • memory/3032-73-0x0000000002A90000-0x0000000002A91000-memory.dmp

    Filesize

    4KB

  • memory/3032-69-0x0000000002A50000-0x0000000002A51000-memory.dmp

    Filesize

    4KB

  • memory/3032-68-0x0000000002A10000-0x0000000002A11000-memory.dmp

    Filesize

    4KB

  • memory/3032-67-0x0000000002A20000-0x0000000002A21000-memory.dmp

    Filesize

    4KB

  • memory/3032-66-0x00000000029F0000-0x00000000029F1000-memory.dmp

    Filesize

    4KB

  • memory/3032-74-0x0000000002A80000-0x0000000002A81000-memory.dmp

    Filesize

    4KB

  • memory/3032-72-0x0000000002A60000-0x0000000002A61000-memory.dmp

    Filesize

    4KB

  • memory/3032-71-0x0000000002A70000-0x0000000002A71000-memory.dmp

    Filesize

    4KB

  • memory/3032-70-0x0000000002A40000-0x0000000002A41000-memory.dmp

    Filesize

    4KB

  • memory/3032-65-0x0000000002A00000-0x0000000002A01000-memory.dmp

    Filesize

    4KB

  • memory/3032-64-0x00000000029D0000-0x00000000029D1000-memory.dmp

    Filesize

    4KB

  • memory/3032-50-0x00000000027E0000-0x00000000027E1000-memory.dmp

    Filesize

    4KB

  • memory/3032-49-0x00000000027F0000-0x00000000027F1000-memory.dmp

    Filesize

    4KB

  • memory/3032-48-0x00000000027C0000-0x00000000027C1000-memory.dmp

    Filesize

    4KB

  • memory/3032-47-0x00000000027D0000-0x00000000027D1000-memory.dmp

    Filesize

    4KB

  • memory/3032-46-0x00000000027A0000-0x00000000027A1000-memory.dmp

    Filesize

    4KB

  • memory/3032-45-0x00000000027B0000-0x00000000027B1000-memory.dmp

    Filesize

    4KB

  • memory/3032-44-0x0000000002780000-0x0000000002781000-memory.dmp

    Filesize

    4KB

  • memory/3032-43-0x0000000002790000-0x0000000002791000-memory.dmp

    Filesize

    4KB

  • memory/3032-42-0x0000000002760000-0x0000000002761000-memory.dmp

    Filesize

    4KB

  • memory/3032-41-0x0000000002770000-0x0000000002771000-memory.dmp

    Filesize

    4KB

  • memory/3032-40-0x0000000002740000-0x0000000002741000-memory.dmp

    Filesize

    4KB

  • memory/3032-39-0x0000000002750000-0x0000000002751000-memory.dmp

    Filesize

    4KB

  • memory/3032-38-0x0000000002720000-0x0000000002721000-memory.dmp

    Filesize

    4KB

  • memory/3032-37-0x0000000002730000-0x0000000002731000-memory.dmp

    Filesize

    4KB

  • memory/3032-36-0x00000000026F0000-0x00000000026F1000-memory.dmp

    Filesize

    4KB

  • memory/3032-35-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/3032-34-0x00000000026D0000-0x00000000026D1000-memory.dmp

    Filesize

    4KB

  • memory/3032-32-0x00000000026B0000-0x00000000026B1000-memory.dmp

    Filesize

    4KB

  • memory/3032-31-0x00000000026C0000-0x00000000026C1000-memory.dmp

    Filesize

    4KB

  • memory/3032-30-0x0000000002680000-0x0000000002681000-memory.dmp

    Filesize

    4KB

  • memory/3032-29-0x0000000002530000-0x0000000002531000-memory.dmp

    Filesize

    4KB

  • memory/3032-28-0x0000000002520000-0x0000000002521000-memory.dmp

    Filesize

    4KB

  • memory/3032-27-0x0000000002560000-0x0000000002561000-memory.dmp

    Filesize

    4KB

  • memory/3032-26-0x0000000002540000-0x0000000002541000-memory.dmp

    Filesize

    4KB

  • memory/3032-78-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-79-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-80-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-81-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-82-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-83-0x00000000009A0000-0x00000000009E4000-memory.dmp

    Filesize

    272KB

  • memory/3032-86-0x0000000000400000-0x00000000006B0000-memory.dmp

    Filesize

    2.7MB

  • memory/3032-87-0x00000000009A0000-0x00000000009E4000-memory.dmp

    Filesize

    272KB