Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22/07/2024, 13:29
General
-
Target
635ba87ffd5f1b190fbbc115b05166b1_JaffaCakes118.exe
-
Size
34KB
-
MD5
635ba87ffd5f1b190fbbc115b05166b1
-
SHA1
0565166815059317ea4154ab6dc680cfa18a813b
-
SHA256
dae73a75579ae95f69de64c18297f8be412d78300940dc7d1ce9d1f730905a9b
-
SHA512
f9b376c9c5bec0be10f838e4ff6ce2142266667092963698575fed21b13135d0e7c023baedbd14e15c9c6ca1cbda9b97d4a1f75f35c377eef51c623dada27ac9
-
SSDEEP
768:962tXz79oJ5zKJIMN6j8Jm70kfhmuy4DFfnzVWFgn7fOM:962tX/9ofzKJIMN6j8Jm70kfhmufF/zZ
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\635ba87ffd5f1b190fbbc115b05166b1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\635ba87ffd5f1b190fbbc115b05166b1_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
664KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
304KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB