Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 13:31
Behavioral task
behavioral1
Sample
bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe
-
Size
60KB
-
MD5
bbeee87d775f4226acde249c963e0039
-
SHA1
6385f80e699822309095bc89bd09fd8bbde5c3b7
-
SHA256
10cb739f9f4cdd068e3c441719e13c8440fc898d70f4e11e49285738ccc9a2f9
-
SHA512
00dd2c39a4881d30ce044ad83f8334834e29b4bc071c6f0d47ec51363600badc5e120b637a6257bd22039d609aa8f47df947a63ea47b21eed14733273d2ef76d
-
SSDEEP
768:xusrjC7YT39KyboMe0Yi/baBb2PM4VWI27UHjbOVm1NnrxrdeVecSn00XFHwL3ZG:MzQ3Jb9e0Yi6b2PbWIPgmb7Y+fFHwtG
Malware Config
Signatures
-
resource yara_rule behavioral2/files/0x000600000002270e-7.dat aspack_v212_v242 -
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Masta\bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Masta\bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bbeee87d775f4226acde249c963e0039_JaffaCakes118.exe -
Suspicious behavior: LoadsDriver 6 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 656 Process not Found
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD5bbeee87d775f4226acde249c963e0039
SHA16385f80e699822309095bc89bd09fd8bbde5c3b7
SHA25610cb739f9f4cdd068e3c441719e13c8440fc898d70f4e11e49285738ccc9a2f9
SHA51200dd2c39a4881d30ce044ad83f8334834e29b4bc071c6f0d47ec51363600badc5e120b637a6257bd22039d609aa8f47df947a63ea47b21eed14733273d2ef76d