Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

82ffd916e0...18.exe

windows7-x64

3

82ffd916e0...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    141s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2024, 04:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    82ffd916e06c21be2485f8cd2a477582_JaffaCakes118.exe

  • Size

    192KB

  • MD5

    82ffd916e06c21be2485f8cd2a477582

  • SHA1

    a323ed08aad0ee88ddb417984ee77ad95296b7d8

  • SHA256

    253c9482b71b6dce4349d6fa148400a4952cece629e6dcd9354541278d07cef5

  • SHA512

    d0438a33e2b5d8387dc1a283b5902d2fdfc3dfe05afab2fcc0fd0809e22cce348b2ce02ef71574a16889c45e9f124c4cfd3a4babb451f5ae7a0c478f032420c7

  • SSDEEP

    3072:n5qsUz6sgvcZoVqy6btEXECtTZdSEs63QjndwxMPq8IEKoG3jnoeNG6S8m8IO8w:0PZoWbtejVeE8jdAaq8S1IO

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\82ffd916e06c21be2485f8cd2a477582_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\82ffd916e06c21be2485f8cd2a477582_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/552-0-0x00000000022A0000-0x00000000022A1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/552-1-0x0000000000400000-0x0000000000435000-memory.dmp

    Filesize

    212KB

    Download