Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 10:33

General

  • Target

    95b9f09e11030c6ca7776fabfeeb841e_JaffaCakes118.exe

  • Size

    124KB

  • MD5

    95b9f09e11030c6ca7776fabfeeb841e

  • SHA1

    ed337701cc08b19bb671929b4a029d26727ead04

  • SHA256

    5e316df13fd47f123aa47db4379085b112a359ba8b3f2af54d8948d14692b77f

  • SHA512

    cd9c90abf77d679b24b906aa1cee0b01c6dc219c195e13c0a7d9983ca4f7f84018c7e5553968543dd08509ec635e2be4f05bc25eb50a200cd30df28e9e4a7c0a

  • SSDEEP

    1536:zLM+azMAjzsugXY3kFq+FZbU4hO8gt+jlvBR8WtBw2TVl127I42cm42mXA2J9aBm:XnazMAjzuYx8IT+jzRHtWeJ2v23o93

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\95b9f09e11030c6ca7776fabfeeb841e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\95b9f09e11030c6ca7776fabfeeb841e_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1524
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1524 -s 284
      2⤵
      • Program crash
      PID:5060
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1524 -ip 1524
    1⤵
      PID:2376

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads