Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/07/2024, 16:00

General

  • Target

    78b5aa967d1fc7c92f5ed0f2e1eda339_JaffaCakes118.exe

  • Size

    256KB

  • MD5

    78b5aa967d1fc7c92f5ed0f2e1eda339

  • SHA1

    dc642a7d92ea80485201cdb5c76bc549b56e01d2

  • SHA256

    fb6a404d302c0e979c447827c4edc69828f805220f40050e1fd5f265c2d73dac

  • SHA512

    f2833bf6883a4eebac730ff84521f2ecd3b994f5a9f1dcc0e4a12c2c4331cdd1526d95c4da4217e04325e06e923ef4fd018915d8f3a3f08dff061f3c1c91a0dc

  • SSDEEP

    6144:Y//nZMhgI+ubNl9p/U1EpA5R6c4Q1EpA5Rh0hdXY/S58ebyA5:Y3nZMhJ+ubNJU1EaT1EaOXYLK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78b5aa967d1fc7c92f5ed0f2e1eda339_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\78b5aa967d1fc7c92f5ed0f2e1eda339_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads