Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 16:59

General

  • Target

    96e43a5f0afe6c8d1e7c7ae919da811f_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    96e43a5f0afe6c8d1e7c7ae919da811f

  • SHA1

    c3c8494d5bfecea55b09d583b30cc210e604c8a1

  • SHA256

    1cc16d0ad6527b7c6fde8b72cbd70a5069b3e2183df7d16c687cdb7319423f26

  • SHA512

    482b0225674236e9c5543797581e02620525d090622180725916e931b8b3d187cd39277a8347b0f6c46438e5d4045e4d977f6429a90b46c8b88c9a1b6afc0720

  • SSDEEP

    768:g08PZDdN9UeS0IGIAicfVvocNG9n4LSLRizpxXqQ5atCdlgwg0wuFZ1wqAbAUFb7:l8rU90/PiSmsQQ/YCwu3aJF6kQsN7txb

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\96e43a5f0afe6c8d1e7c7ae919da811f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\96e43a5f0afe6c8d1e7c7ae919da811f_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads