Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2024, 07:03
Behavioral task
behavioral1
Sample
JaffaCakes118_500dd1ac11ed30d92107adee26507f16fd3419046f9a1d59d1218d8f3dc2097a.exe
Resource
win7-20240729-en
11 signatures
150 seconds
General
-
Target
JaffaCakes118_500dd1ac11ed30d92107adee26507f16fd3419046f9a1d59d1218d8f3dc2097a.exe
-
Size
6.0MB
-
MD5
e78724095e496da7336b4b451f4412ef
-
SHA1
060ce795a636bc60b9055dc5c9cd2f5519756039
-
SHA256
500dd1ac11ed30d92107adee26507f16fd3419046f9a1d59d1218d8f3dc2097a
-
SHA512
19bf50a75b1712a06e73544164cca04af22ef8c71122e19ae68980b3b6238781b65a4d4dec6a6c317ca79c6239d3c83a954e75aca49cbc11d649cbb9443cbfaf
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUW:eOl56utgpPF8u/7W
Malware Config
Signatures
-
Xmrig family
-
XMRig Miner payload 2 IoCs
resource yara_rule behavioral2/memory/880-0-0x00007FF79A090000-0x00007FF79A3E4000-memory.dmp xmrig behavioral2/memory/880-1-0x00007FF79A090000-0x00007FF79A3E4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/880-0-0x00007FF79A090000-0x00007FF79A3E4000-memory.dmp upx