Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11/07/2024, 11:13
General
-
Target
38e0cf78154dc3106a85822ea91a933b_JaffaCakes118.exe
-
Size
961KB
-
MD5
38e0cf78154dc3106a85822ea91a933b
-
SHA1
17eab8af533e2edcf271be04ee1bec3771336e7e
-
SHA256
02786fbf22b3a946ecf8eaae05127fb616d8f12ec94aa9a669e7897a71aee7d9
-
SHA512
e209dfda4a79ba00ad74df6818954a5a2e1db8534344b59c7c16c6e9bd1e53ad24edf3c3cbefcb68cde57a7d26d089bbb1eec047dd09cd634b997ece1704b3e3
-
SSDEEP
12288:NXWK/zuOn6PITSvUG+T8E3tDUcJF1TjSoYQNTF3Z4mxxNniRhTqKTq7FFg0gkR:hWTmyx+Th3zVXYQNTQmXRiRhu2qTg0g2
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\38e0cf78154dc3106a85822ea91a933b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38e0cf78154dc3106a85822ea91a933b_JaffaCakes118.exe"2⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Windows\uninstal.bat3⤵
-
-
-
C:\Windows\L_Server2007.exeC:\Windows\L_Server2007.exe1⤵
- Executes dropped EXE
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
961KB
MD538e0cf78154dc3106a85822ea91a933b
SHA117eab8af533e2edcf271be04ee1bec3771336e7e
SHA25602786fbf22b3a946ecf8eaae05127fb616d8f12ec94aa9a669e7897a71aee7d9
SHA512e209dfda4a79ba00ad74df6818954a5a2e1db8534344b59c7c16c6e9bd1e53ad24edf3c3cbefcb68cde57a7d26d089bbb1eec047dd09cd634b997ece1704b3e3
-
Filesize
218B
MD549b6d618109390fe8e30baa6877faacf
SHA1fd73166dc7ebd5b53192b1f6fb36f8203d9bef3e
SHA256114d47eaca2d6dd8e00788d99f5de186385bd662d3abc6d60b5caff8071fbfe0
SHA512286018b6f31a5b01d00cd3b2055f4ac32f1aab25d6b7519af4fbc5127390f6a7c5910f95191bd23ae91d364c4c26ca935ef879edab6dfcdadcfdbcab0d23e7fa
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
336KB
-
Filesize
1024KB
-
Filesize
336KB
-
Filesize
1024KB
-
Filesize
1024KB