Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 09:13
General
-
Target
49267c01461e9e714e1b7383203beee5_JaffaCakes118.exe
-
Size
174KB
-
MD5
49267c01461e9e714e1b7383203beee5
-
SHA1
d4caa55b2995c713c901fbd4b1e6e56a5329fa97
-
SHA256
16c6a6a8dfd210ec78f61efe9a436ee742a5046b4495bb4749948d5e3c73c78e
-
SHA512
5fafaed50590137d78f797577355b28949952fd6eb0c89ddad3f89ed8ab2e7af419bc52fa9fece78e5788bbc529cd35ba525ab74d6bf90c8cd4ab2638bd11c2c
-
SSDEEP
3072:WDhZdVchlX8kuFfDNjOXUn1krDG3+lxVEKC97WvZ3LbQr1wltldP9CTE864y:OwlXXuFfDNjOX8ay0UAZ705YBFCs4
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\49267c01461e9e714e1b7383203beee5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\49267c01461e9e714e1b7383203beee5_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
-
Filesize
444KB
-
Filesize
444KB