Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2024, 22:45

General

  • Target

    718d542038ce3a9253fe9ab6d8dabd09_JaffaCakes118.exe

  • Size

    90KB

  • MD5

    718d542038ce3a9253fe9ab6d8dabd09

  • SHA1

    0eabd8a3a6c7254916587c35e7fac4461adb6b44

  • SHA256

    83ce031351a3b95fbd0a9fe5b294be5bcef14c71f04466b71b646121c2b71ecc

  • SHA512

    7deae80a9269fc11456e76df1fca4196ed005fdf46716b627156edf6dfe646d47d261f9770180ce98cdeaa0a47b84d6cea400e6f47b7709fa24715b0df0b6704

  • SSDEEP

    1536:n7pkHLZNCBkIgHoVHoponnwTTCmk3C2GSOM627:n7pkH3CBXgIVHWPpFe

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\718d542038ce3a9253fe9ab6d8dabd09_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\718d542038ce3a9253fe9ab6d8dabd09_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4884-0-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB

  • memory/4884-5-0x0000000002590000-0x00000000025A0000-memory.dmp

    Filesize

    64KB

  • memory/4884-4-0x0000000002580000-0x0000000002590000-memory.dmp

    Filesize

    64KB

  • memory/4884-3-0x0000000000650000-0x0000000000660000-memory.dmp

    Filesize

    64KB

  • memory/4884-15-0x0000000002660000-0x0000000002670000-memory.dmp

    Filesize

    64KB

  • memory/4884-17-0x0000000002690000-0x00000000026A0000-memory.dmp

    Filesize

    64KB

  • memory/4884-19-0x00000000035C0000-0x00000000035D0000-memory.dmp

    Filesize

    64KB

  • memory/4884-16-0x0000000002680000-0x0000000002690000-memory.dmp

    Filesize

    64KB

  • memory/4884-14-0x0000000002650000-0x0000000002660000-memory.dmp

    Filesize

    64KB

  • memory/4884-13-0x0000000002640000-0x0000000002650000-memory.dmp

    Filesize

    64KB

  • memory/4884-9-0x0000000002600000-0x0000000002610000-memory.dmp

    Filesize

    64KB

  • memory/4884-8-0x00000000025F0000-0x0000000002600000-memory.dmp

    Filesize

    64KB

  • memory/4884-18-0x00000000035B0000-0x00000000035C0000-memory.dmp

    Filesize

    64KB

  • memory/4884-12-0x0000000002630000-0x0000000002640000-memory.dmp

    Filesize

    64KB

  • memory/4884-11-0x0000000002620000-0x0000000002630000-memory.dmp

    Filesize

    64KB

  • memory/4884-10-0x0000000002610000-0x0000000002620000-memory.dmp

    Filesize

    64KB

  • memory/4884-7-0x00000000025D0000-0x00000000025E0000-memory.dmp

    Filesize

    64KB

  • memory/4884-6-0x00000000025A0000-0x00000000025B0000-memory.dmp

    Filesize

    64KB

  • memory/4884-22-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB