Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    78s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/08/2024, 00:17

General

  • Target

    841ec582c4ccc5aac5d6ba6396a3d1f1_JaffaCakes118.exe

  • Size

    231KB

  • MD5

    841ec582c4ccc5aac5d6ba6396a3d1f1

  • SHA1

    39dfc390e17fa9104d26f52d4a5fd3e496d88770

  • SHA256

    b70941ad0e297b8c054645b578556f38cb12f90c33304924963d6ec2fbb33265

  • SHA512

    771f65095a50b27d3579191420ddb14c83bfff76397479e7053fa185fc0ff497ccbbc91090596b3c64c0bf2e9485ffd20244f1215166af40f8ba732c65a53006

  • SSDEEP

    3072:/3c1fP4AJJE0M6wIJvql5pJ5kAjniGMBUCq6+i6hzk5zWhPm1c9if/IE:fOPjQ0XqTaKixJqd6WhPj9if/3

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\841ec582c4ccc5aac5d6ba6396a3d1f1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\841ec582c4ccc5aac5d6ba6396a3d1f1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads