Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 19:10

General

  • Target

    319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe

  • Size

    279KB

  • MD5

    319ea2e99512ce87668a18103eafbc3c

  • SHA1

    c0bca8bbbe6d56e46088e784a89ac072d3588158

  • SHA256

    c3f06db712c21d2d93d8d9a09197af60c3c614dc0bc900e3f6afb25fd46edc01

  • SHA512

    d56c8cfc5ed83c52b74304265bb17bd73e5b6e90055b1b185151d8fe07ad09838cc598967f973e95962c9ff881699ee2d1a5b61d6719b0fbbfc372417aec2160

  • SSDEEP

    6144:aaeeKzJEDTTYJpoZi+wLAkg1sKKzwwJoSgn:jeeN3TYXoZYc1rKzw0oSg

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4896-0-0x0000000000400000-0x00000000004C9000-memory.dmp

    Filesize

    804KB

  • memory/4896-8-0x0000000000400000-0x00000000004C9000-memory.dmp

    Filesize

    804KB