Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/09/2024, 14:46
General
-
Target
da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe
-
Size
80KB
-
MD5
da93e572718d1c2154e55a0a238ed673
-
SHA1
82d9e925c889780faf06ef5525cb3abb8a0c88df
-
SHA256
787f5e7ef2ffd3f642d62d68ae840fb5875158f25815dc32215b20760e7e7c3e
-
SHA512
6ddaa8c71263e4b06cef10d5a755a4e38d7ae09a2cad89f6f65296c5dd7394272c69432cf5ee968334bea1eb0d3ce71b88b31bdd078b19f2bda1f2db6075df41
-
SSDEEP
1536:K7UxyGtordZ1Z2qSDnoDUP3pNkM00M1NgqHTJKqO9O:grJSDnogP3u0M16GTJK59O
Malware Config
Signatures
-
Credentials from Password Stores: Credentials from Web Browsers 1 TTPs
Malicious Access or copy of Web Browser Credential store.
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
664KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
392KB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB