Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240910-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/09/2024, 19:58

General

  • Target

    e9dfb372d5ec35d80c5e411a1b6a07b0_JaffaCakes118.exe

  • Size

    471KB

  • MD5

    e9dfb372d5ec35d80c5e411a1b6a07b0

  • SHA1

    d28a53da10e622eae8ca0404110f968b420f62f9

  • SHA256

    45bdd4cf1504c05e009455cdf1a227534a656c7e7ec3d20d0b93371f1c16cfac

  • SHA512

    f48332063ee77d55e842b19f40f53e88d5619d854a1579f0203c77c64fbdc59b995e56f3883781f598113e184e33dc17df7ad0183ba489b0e8aba580e4015a91

  • SSDEEP

    6144:dPfyhs5G32Xu7YtMrbm2MrJj6NzoBcZSxYxdYor6tLhD0pJG7zE/gEFmea5kimZB:o2yYt49NzoBcZBEoGtFzKm/dh4gW9SA

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\e9dfb372d5ec35d80c5e411a1b6a07b0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e9dfb372d5ec35d80c5e411a1b6a07b0_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    PID:2396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2396-0-0x00000000012A0000-0x00000000012A2000-memory.dmp

    Filesize

    8KB

  • memory/2396-1-0x00000000012B0000-0x00000000012B1000-memory.dmp

    Filesize

    4KB

  • memory/2396-2-0x0000000001D10000-0x0000000001D11000-memory.dmp

    Filesize

    4KB

  • memory/2396-3-0x0000000001D30000-0x0000000001D31000-memory.dmp

    Filesize

    4KB

  • memory/2396-7-0x0000000001D80000-0x0000000001D81000-memory.dmp

    Filesize

    4KB

  • memory/2396-16-0x0000000003A10000-0x0000000003A11000-memory.dmp

    Filesize

    4KB

  • memory/2396-15-0x00000000039C0000-0x00000000039C1000-memory.dmp

    Filesize

    4KB

  • memory/2396-14-0x0000000001D70000-0x0000000001D72000-memory.dmp

    Filesize

    8KB

  • memory/2396-13-0x00000000039B0000-0x00000000039B1000-memory.dmp

    Filesize

    4KB

  • memory/2396-12-0x00000000039A0000-0x00000000039A1000-memory.dmp

    Filesize

    4KB

  • memory/2396-11-0x0000000003990000-0x0000000003991000-memory.dmp

    Filesize

    4KB

  • memory/2396-10-0x0000000003980000-0x0000000003981000-memory.dmp

    Filesize

    4KB

  • memory/2396-9-0x0000000003970000-0x0000000003971000-memory.dmp

    Filesize

    4KB

  • memory/2396-8-0x0000000003960000-0x0000000003961000-memory.dmp

    Filesize

    4KB

  • memory/2396-6-0x0000000001D60000-0x0000000001D61000-memory.dmp

    Filesize

    4KB

  • memory/2396-5-0x0000000001D50000-0x0000000001D51000-memory.dmp

    Filesize

    4KB

  • memory/2396-4-0x0000000001D40000-0x0000000001D41000-memory.dmp

    Filesize

    4KB

  • memory/2396-18-0x0000000003A30000-0x0000000003A31000-memory.dmp

    Filesize

    4KB

  • memory/2396-17-0x00000000039D0000-0x00000000039D1000-memory.dmp

    Filesize

    4KB

  • memory/2396-24-0x0000000003A20000-0x0000000003A21000-memory.dmp

    Filesize

    4KB

  • memory/2396-23-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/2396-25-0x00000000039E0000-0x0000000003A06000-memory.dmp

    Filesize

    152KB

  • memory/2396-29-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/2396-30-0x0000000003AB0000-0x0000000003AB1000-memory.dmp

    Filesize

    4KB

  • memory/2396-31-0x0000000003AA0000-0x0000000003AA1000-memory.dmp

    Filesize

    4KB

  • memory/2396-22-0x0000000003A70000-0x0000000003A71000-memory.dmp

    Filesize

    4KB

  • memory/2396-21-0x0000000003A60000-0x0000000003A61000-memory.dmp

    Filesize

    4KB

  • memory/2396-20-0x0000000003A50000-0x0000000003A51000-memory.dmp

    Filesize

    4KB

  • memory/2396-19-0x0000000003A40000-0x0000000003A41000-memory.dmp

    Filesize

    4KB