Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18/08/2024, 17:32
General
-
Target
a7930046bc84923ab60c88c1b0bda453_JaffaCakes118.exe
-
Size
972KB
-
MD5
a7930046bc84923ab60c88c1b0bda453
-
SHA1
fe59cc26c673eaf32acf4bf25a716aa43b7723be
-
SHA256
aac1ab9a2e8d4747d25a3d4200bf36ade9bca254240d581571ea0b654472fde8
-
SHA512
c5d5d162067d5ce0faddd42edd6363ea68e51d91612220beb4605f33782844dfdb5b00292c43e9b779ec8e5a0f522a558a8c11dcb1561463de9016611d372029
-
SSDEEP
24576:xPXJievkuzn/izeyp0CGw4hpQTefLdwnO5mF04:fievku7VPCzu2TefLmOgF04
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7930046bc84923ab60c88c1b0bda453_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a7930046bc84923ab60c88c1b0bda453_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB