Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

a2c68d92d2...18.exe

windows7-x64

3

a2c68d92d2...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    131s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2024, 13:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a2c68d92d2af67fecc30a2f401886d87_JaffaCakes118.exe

  • Size

    1011KB

  • MD5

    a2c68d92d2af67fecc30a2f401886d87

  • SHA1

    54e3d7181bd97240369443b1fc6998d40200633f

  • SHA256

    1c2a8b054be080576d27753bb78ef1b64ecf266f751074767f61f574b7ef23d0

  • SHA512

    a7b00cc66e43c91390a591bbbe1bffa7463bffaa34fa6226b7755f698d8c15a64f83f46be9e203c931b5c9f7bef7d227fd66b897d53e519d8a60e3dfce6ca732

  • SSDEEP

    24576:dk9hhImsj5S3wBB97JtjVe1yY741E88weXQmXukTDSdSDm:q9/Izj5owpVPY74CoBmeqDm

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2c68d92d2af67fecc30a2f401886d87_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a2c68d92d2af67fecc30a2f401886d87_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4872-0-0x0000000001000000-0x0000000001107000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/4872-1-0x00000000010B4000-0x00000000010B5000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4872-2-0x0000000001000000-0x0000000001107000-memory.dmp

    Filesize

    1.0MB

    Download