Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27/07/2024, 07:55
General
-
Target
7770882bf3ec21cc07360e3e850d1d22_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
7770882bf3ec21cc07360e3e850d1d22
-
SHA1
5dca9d40e24d2b6816a81fdbb43d95b7355f5c3b
-
SHA256
451c802c5ba36d44f94d41bb73f5d2f10b07c8410d0c9be91ce97020c9f80ccf
-
SHA512
4ab0a16258d3a53065135699cc598f8b4ab97a7aa2a8b73b00e3fbd4751208380fc0b2d25c11a7181630b1644610f997d0825fcfc44bd9e53eb489a763087ad7
-
SSDEEP
49152:hSVADMIEQAeXBi70tIIDMIEQAevrI5GZS/ZoE71LGc2eC6JI/Cfnc:hS+fAXYmYfACs5GZAVETeDI/Cvc
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7770882bf3ec21cc07360e3e850d1d22_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7770882bf3ec21cc07360e3e850d1d22_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
772KB
-
Filesize
772KB