Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 15:21
General
-
Target
a3115b4a1ad3ac2364369f39ac5bc22e_JaffaCakes118.exe
-
Size
331KB
-
MD5
a3115b4a1ad3ac2364369f39ac5bc22e
-
SHA1
1c9251e085154839ae87685471cc1df5a58c42b5
-
SHA256
991738fd06d80570f3a0d3b2e673952c8e93b52ddeb7c47c59db3a204ae70603
-
SHA512
a62518e16c3652d320ea9f9c66e250b0c4c7027510c8312a8f41d32d086efc72470d1411103c03091f814aac944a0ba5755ba4373093cca0521273290b449a4d
-
SSDEEP
6144:HmuNTL5fhadkPUsXEjr+TwasEuX3lOEE0D84OxXUHTrTvnUVBFFNqMc2V467R+Jy:brKkXsamcEFK5UHHTvUVlNzc2VxG2
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3115b4a1ad3ac2364369f39ac5bc22e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a3115b4a1ad3ac2364369f39ac5bc22e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
324KB
-
Filesize
392KB
-
Filesize
392KB
-
Filesize
392KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
392KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
4KB
-
Filesize
324KB
-
Filesize
108KB