Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/07/2024, 23:49

General

  • Target

    02d323abe2b0600230ebfbe5e674c034_JaffaCakes118.exe

  • Size

    195KB

  • MD5

    02d323abe2b0600230ebfbe5e674c034

  • SHA1

    80d13e2e1c4295aa365fe5af06045bc67982f71a

  • SHA256

    e5f113c432b443b4f84db4441e8b3994eba09e80417169089366576bf726003e

  • SHA512

    7e6688828cefc05d024f5b7b5b63c84268a01af4dff0419f357afb142ca4d0a3b5092d40dece595f4c65569ec4ba93118a42a0b2be8f219bdf93c6c6afa35492

  • SSDEEP

    3072:CLMD1TkayEYl3DZw4vtx6m2wk/P0DBLdCHYJdPS+QomJHj85xWk0w6jZr:B1TzaTZwqWp/PeNdSYeJQJ0FZr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\02d323abe2b0600230ebfbe5e674c034_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\02d323abe2b0600230ebfbe5e674c034_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4808-0-0x000000000042B000-0x000000000042D000-memory.dmp

    Filesize

    8KB

  • memory/4808-1-0x0000000000400000-0x0000000000436000-memory.dmp

    Filesize

    216KB

  • memory/4808-2-0x0000000000400000-0x0000000000436000-memory.dmp

    Filesize

    216KB

  • memory/4808-3-0x0000000000400000-0x0000000000436000-memory.dmp

    Filesize

    216KB