Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

710a524ed7...18.exe

windows7-x64

6

710a524ed7...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    123s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 20:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    710a524ed770371c4e5d6acb19f63b37_JaffaCakes118.exe

  • Size

    72KB

  • MD5

    710a524ed770371c4e5d6acb19f63b37

  • SHA1

    6f2f536678f9e597e44ff56142c427331fe2a539

  • SHA256

    b8d9f5fa0c79109763a09bcb5759595474745de37a9882b8a52f8fb6d957e19b

  • SHA512

    1bee9906c2bb1a5daf7a994ac3a7f30e741e945d7207dd9029f1f1eebcd03879f2085b59a745fceda2e78cf7852222f79f78bb6c46eea66f0c10c3737c6b7800

  • SSDEEP

    1536:H7mb8MxnvuzGbK3TAzGh4to+hRFCeozsVvfC+cj:H7Ej96C6rzsVvfC+cj

Score
6/10
discoverypersistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\710a524ed770371c4e5d6acb19f63b37_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\710a524ed770371c4e5d6acb19f63b37_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    PID:2392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads