Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07/12/2024, 12:06
General
-
Target
d25dd2ebc039d139aff5cd50150fb883_JaffaCakes118.exe
-
Size
16KB
-
MD5
d25dd2ebc039d139aff5cd50150fb883
-
SHA1
668abae6f35071b8b52a265c4f1468f5a159be0f
-
SHA256
8ac81eab90aaf9d25b646bd5e67ffaeb5eae897243fbde6a8331e40a9bc8281c
-
SHA512
19d67adfeef51036826d52fe8500be6f6e747816503baff9d2d4ea966cab0313e56544ee4f4f2d0af6fa0b7b398a7e2c752de53db2aa534f97c31265cc0e59bf
-
SSDEEP
192:nvknyMu95OOYiyMpt/Mt/8CRk9dFRM2qk5WvGBIP73FPJ/bvbQjcW:Yez2iyiVy8Cm9q2qkQvGBIPBPJ3Az
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d25dd2ebc039d139aff5cd50150fb883_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d25dd2ebc039d139aff5cd50150fb883_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB