Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30/12/2024, 06:14
General
-
Target
JaffaCakes118_6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8.exe
-
Size
655.0MB
-
MD5
3c579d601ce3840afad9bbbf3b720ae3
-
SHA1
e29a2f27111e4fe3342ef19a7269a031957b7a62
-
SHA256
6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8
-
SHA512
3d4893cbb4b0b0bc91c390a8462f537eaa5c7f3bc45bdfa1a16380371108fefa1db920ebba6b8c3038071b78ae281d35e22368ca334b6bf2bfdda19d900bd1ac
-
SSDEEP
98304:h2PrQwDV4h9PCR7dYskHmyA8dVZQFWTzIDalBsH4XiupIwaLXu8sFppzv:h2PtV4bPCNdYsCACVZR4DalBVX30SLp
Malware Config
Signatures
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Drops file in System32 directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s fhsvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
127B
MD58ef9853d1881c5fe4d681bfb31282a01
SHA1a05609065520e4b4e553784c566430ad9736f19f
SHA2569228f13d82c3dc96b957769f6081e5bac53cffca4ffde0ba1e102d9968f184a2
SHA5125ddee931a08cfea5bb9d1c36355d47155a24d617c2a11d08364ffc54e593064011dee4fea8ac5b67029cab515d3071f0ba0422bb76af492a3115272ba8feb005
-
Filesize
3.0MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
12.2MB
-
Filesize
3.0MB