Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fae87cd29d...18.exe

windows7-x64

1

fae87cd29d...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/09/2024, 21:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fae87cd29d9bc6f3522c8b8be3396657_JaffaCakes118.exe

  • Size

    242KB

  • MD5

    fae87cd29d9bc6f3522c8b8be3396657

  • SHA1

    8188f2281b41167d0f805abbf58f21a21faad42e

  • SHA256

    c49cc41d45d353a7008d3c516bbf49f66cb12ea42b5769f4314569e3b5b55874

  • SHA512

    5b4f69dd3ae1e3f75bb300e904813b70414df46dd907b8b910d971074ff88eb204c681449cbd5dd52f0bc00627e901a3a654c6870c8004482a119c4d123b89a8

  • SSDEEP

    6144:czLolDuTb+w2j9j6vPtEbTWcj64jj34Xb60fGL:c/+wM8Vcu4vn

Score
1/10

Malware Config

Signatures

  • Modifies registry class 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fae87cd29d9bc6f3522c8b8be3396657_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fae87cd29d9bc6f3522c8b8be3396657_JaffaCakes118.exe"
    1⤵
    • Modifies registry class
    PID:5064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5064-0-0x00007FF89FC25000-0x00007FF89FC26000-memory.dmp

    Filesize

    4KB

    Download

  • memory/5064-1-0x00007FF89F970000-0x00007FF8A0311000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/5064-2-0x00007FF89F970000-0x00007FF8A0311000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/5064-4-0x00007FF89F970000-0x00007FF8A0311000-memory.dmp

    Filesize

    9.6MB

    Download