Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2024, 11:44

General

  • Target

    3fa7eb0f0336e557fe4b1483bdd2b128_JaffaCakes118.exe

  • Size

    83KB

  • MD5

    3fa7eb0f0336e557fe4b1483bdd2b128

  • SHA1

    50a3c2345ce6a07d7cf39caed50df0184473d506

  • SHA256

    c46599a3dd6405f362479e121a4a97580890069ce2dcf851c9e2618140f582e1

  • SHA512

    42f7ba453954316009ec25eb9d75fe7e68d385abbb971990bfa7d70f10351af1c375deb70d8082e2c3629df74ae0c7d79c4503837d79bb6fcf981aa3c90a6b89

  • SSDEEP

    1536:GKNNNoest/WTJvMeDkMkV0pV+ltg1X+8iLc50DKBlqAQh7HrjEErxTWDTMqhGKYr:NE8vFE06tg1OfLU0+BlMhLjBkMqhGKZg

Score
8/10

Malware Config

Signatures

  • Contacts a large (661) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Drops file in Program Files directory 38 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 48 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3fa7eb0f0336e557fe4b1483bdd2b128_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3fa7eb0f0336e557fe4b1483bdd2b128_JaffaCakes118.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:2040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-0-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2040-1-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-2-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-6-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-8-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-7-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-9-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-10-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-11-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-12-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-13-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-14-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-15-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-16-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-17-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-18-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-19-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-20-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-21-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-22-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-23-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-24-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-25-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-26-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-27-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-28-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-29-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-30-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-31-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-32-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-33-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-34-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-35-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-36-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-37-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-38-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-39-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-40-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-41-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-42-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-43-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-44-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-45-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-46-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-47-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-48-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-49-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-50-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-51-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-52-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-53-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-54-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-55-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-56-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-57-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-58-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-59-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-60-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-61-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-62-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-63-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-64-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-65-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-105-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/2040-970-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB