Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

a868760c9f...18.exe

windows7-x64

3

a868760c9f...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 22:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a868760c9f41960fcb5c4ef440f0c7d7_JaffaCakes118.exe

  • Size

    625KB

  • MD5

    a868760c9f41960fcb5c4ef440f0c7d7

  • SHA1

    1344433df901ad4ce9498d19872d16c13e495963

  • SHA256

    cb2af96aeaa0228fa63550d3157cf8bf9d42e1af0d830760913adbd3f6228c6c

  • SHA512

    da796193e6127ec781f0600f698e67d83f668fd8b30f48fdb68eaf442d2f2b9c3290c1976bc63f4b03fd4f2d86652e3b848736dc369aa21ed4eb0e09b6329bd5

  • SSDEEP

    12288:imLvVLG8jKfvquZ7x7JYKbbavqA/U6GBmhEgE+u9WhhlMTLt00mtutpvs:imLv1G8jKfvquZ7JJYK8qA/TGBmi+u9+

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a868760c9f41960fcb5c4ef440f0c7d7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a868760c9f41960fcb5c4ef440f0c7d7_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
    Filesize

    6KB

    MD5

    443b469599cc56818540fd91e7dce478

    SHA1

    538a4b273afa123485748a1f57df650edec7402b

    SHA256

    bf96d25efedb8fe61e02c523de526309eb11874874d71e0033b6f46c7b2ece74

    SHA512

    20b700218169f1822281765d42c3e46d157a04b5e8c6944eb8eeaa8ee2c0ecbdada124912a5117cf28f2849542781f85bb2e728bca31f09961f097321a6e8176

    Download Submit