Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 07:50
General
-
Target
33dbeae5ec1b4e1fae8dd467266e9799_JaffaCakes118.exe
-
Size
172KB
-
MD5
33dbeae5ec1b4e1fae8dd467266e9799
-
SHA1
ce3eee0ff958f04c182f722b41d16a0b2deb0606
-
SHA256
2b0ed02dbb6437e6e3ed8bcb1f8671858c5447f4a06e01bcfbdf97df42660b66
-
SHA512
cff3ce1aaff293b798484a1dffdd092a9e97f0eaadd49c39b649136d38ec76e4a7124cd732d62bd1fd442804c7e518e3a3c1f0c2b41a138f2b693b4ae88216e8
-
SSDEEP
3072:YEfP+YAyGsPP5YqrbVzerqCqxqiKkGYXaYn1ET4QdDSFjtMzFjlyncjNKq0:RFxGsPeqrbVzytxYn1qqtMJZhNB0
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\33dbeae5ec1b4e1fae8dd467266e9799_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\33dbeae5ec1b4e1fae8dd467266e9799_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
16KB
-
Filesize
4KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
16KB
-
Filesize
4KB