Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 14:46

General

  • Target

    da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    da93e572718d1c2154e55a0a238ed673

  • SHA1

    82d9e925c889780faf06ef5525cb3abb8a0c88df

  • SHA256

    787f5e7ef2ffd3f642d62d68ae840fb5875158f25815dc32215b20760e7e7c3e

  • SHA512

    6ddaa8c71263e4b06cef10d5a755a4e38d7ae09a2cad89f6f65296c5dd7394272c69432cf5ee968334bea1eb0d3ce71b88b31bdd078b19f2bda1f2db6075df41

  • SSDEEP

    1536:K7UxyGtordZ1Z2qSDnoDUP3pNkM00M1NgqHTJKqO9O:grJSDnogP3u0M16GTJK59O

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\da93e572718d1c2154e55a0a238ed673_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4928-0-0x00007FF945625000-0x00007FF945626000-memory.dmp

    Filesize

    4KB

  • memory/4928-1-0x000000001AFA0000-0x000000001B046000-memory.dmp

    Filesize

    664KB

  • memory/4928-2-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-3-0x000000001B520000-0x000000001B9EE000-memory.dmp

    Filesize

    4.8MB

  • memory/4928-4-0x000000001BAB0000-0x000000001BB4C000-memory.dmp

    Filesize

    624KB

  • memory/4928-5-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-6-0x0000000000870000-0x0000000000878000-memory.dmp

    Filesize

    32KB

  • memory/4928-7-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-8-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-9-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-11-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-10-0x000000001DED0000-0x000000001DF32000-memory.dmp

    Filesize

    392KB

  • memory/4928-12-0x000000001E590000-0x000000001E89E000-memory.dmp

    Filesize

    3.1MB

  • memory/4928-14-0x00007FF945625000-0x00007FF945626000-memory.dmp

    Filesize

    4KB

  • memory/4928-15-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-16-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB

  • memory/4928-17-0x00007FF945370000-0x00007FF945D11000-memory.dmp

    Filesize

    9.6MB