Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 22:33

General

  • Target

    fd467ed77f83283caf0c971e108c28fd_JaffaCakes118.exe

  • Size

    2.4MB

  • MD5

    fd467ed77f83283caf0c971e108c28fd

  • SHA1

    88bda05eec93affc4e1dd2195d4f2c802b72777f

  • SHA256

    36a6bd14c468207bad218c223b40c0ee6c4120a529f96bfd9c8c868d235ee85e

  • SHA512

    cf566edfcb4a92ab2e20aec1a525ce0466850df4d09b625d688f592e9777ff89ee3d4d7214536ef355cf3a90f70853e37ab022d93c0572a9bd6136da40a4fcb0

  • SSDEEP

    49152:7nO2w4q0WVtx2LeFKSFmDNAdlHk1JFjcXLFFl0c9sGNZebsgC/:idndx1FKSqAbk5AxrT9scysR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd467ed77f83283caf0c971e108c28fd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fd467ed77f83283caf0c971e108c28fd_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:3540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsz853F.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

  • C:\Users\Admin\AppData\Local\Temp\nsz853F.tmp\ioSpecial.ini

    Filesize

    1KB

    MD5

    68536224147b3740b46533478cd318d0

    SHA1

    41887947924627885bbf98049309b4a7f44f34a6

    SHA256

    75115992369f98f3c4548c6e0ae2c910b3bc55af8e57fd3fa3e7fca90a6272d7

    SHA512

    39ee4633077d54edb40e1aa04765430b636286a2d431c06ca0f223bfae1a3c9c5e4689160d822ca10c192a3f0590d071cc0086a44ecd13a589327fdc44bb8ed7