Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

6f8fe17891...18.exe

windows7-x64

1

6f8fe17891...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2024, 12:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6f8fe1789152093e625e926e02c2ad7a_JaffaCakes118.exe

  • Size

    43KB

  • MD5

    6f8fe1789152093e625e926e02c2ad7a

  • SHA1

    9c75c0e17700148f60c81a44b2851f3e44dc9f0f

  • SHA256

    50a81ae392c7d08bab6c66453922acb0a96dfbdaab8f07f53221c90734468012

  • SHA512

    73ba5a9c97f030c01ace292ae4e07eae21e899fabd390f6c1f1c46be4b2c7d23436de5604efed5d714fb6537778255ce84cbea8bee52bac96d12ecddc75fda72

  • SSDEEP

    768:zKt0iExLXqSgIs4U6+OdDz0VllH27UibBHxvT1dmu22nNa4LnvxW8GWm32:zK8/gIs4U6+OdDgV7ZCj1dmuvNauvwG

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f8fe1789152093e625e926e02c2ad7a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6f8fe1789152093e625e926e02c2ad7a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2020-0-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

    Download

  • memory/2020-1-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

    Download