Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2024, 09:59

General

  • Target

    c07d6f853368e800ba9c84a4f70444ea_JaffaCakes118.exe

  • Size

    5.9MB

  • MD5

    c07d6f853368e800ba9c84a4f70444ea

  • SHA1

    7976d0977574fc76e4ee6974471d9c44751142fd

  • SHA256

    dd917461b1f4b8b25524e9d7b08e5f4a2bff5453187f8aed9c21590ceb72d393

  • SHA512

    31a6962074a931bb266e521a279734186352610de2534500e885369b80b304433c8f7fae8c433e48125fae6c0cb3d8a83b2fa0d0858f6a846edc3e4fe1ffcd55

  • SSDEEP

    98304:demTLkNdfE0pZ3u56utgpPFotBER/mQ32lUD:E+b56utgpPF8u/7D

Score
10/10

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c07d6f853368e800ba9c84a4f70444ea_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c07d6f853368e800ba9c84a4f70444ea_JaffaCakes118.exe"
    1⤵
      PID:3908

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3908-0-0x00007FF660370000-0x00007FF6606C4000-memory.dmp

      Filesize

      3.3MB