Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 13:53
General
-
Target
34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe
-
Size
381KB
-
MD5
34fe896c00984da34e2a1975d6a0c27d
-
SHA1
508c893c5ad16f7170b70d133fd8f366851e23e2
-
SHA256
6abdbd2bbe1ef5fa0353dca52d1e1081ffd49aaa5e4e89fb9b6495113f656cc9
-
SHA512
3de58968e01c83f9b6b577d4c397b4347f2a65ec21c2e6647114206a007aa476cc6ba1588f52d71978e42d3467a5008561f293d029eee946f50bedb9ae236fa5
-
SSDEEP
6144:2YympWchgXVwcqU2t3en4jflXrBmeUGa+6AzwBsKs7+Q86a5uebm:29mKODZecflXroehaRCwKKdQfa+
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\pRogram Files\VTTrayp"C:\pRogram Files\VTTrayp"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
381KB
MD534fe896c00984da34e2a1975d6a0c27d
SHA1508c893c5ad16f7170b70d133fd8f366851e23e2
SHA2566abdbd2bbe1ef5fa0353dca52d1e1081ffd49aaa5e4e89fb9b6495113f656cc9
SHA5123de58968e01c83f9b6b577d4c397b4347f2a65ec21c2e6647114206a007aa476cc6ba1588f52d71978e42d3467a5008561f293d029eee946f50bedb9ae236fa5
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
380KB
-
Filesize
1.1MB
-
Filesize
380KB