Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 10:28 UTC

General

  • Target

    aaa429ce1f041efe98d06e16eb62e6c2_JaffaCakes118.exe

  • Size

    439KB

  • MD5

    aaa429ce1f041efe98d06e16eb62e6c2

  • SHA1

    818a338a1efae09673609d0e183fa61a8ed78fd7

  • SHA256

    06da6bf3c1477d27ee8607aeb14f23f24a7e7e402470327c84cdf314bf0f5324

  • SHA512

    ec76906d60eaa235aa91ba69372d3994afbc968b8aae60125f4f6d29518659e23d204c53f8ca65f919f1f18914ed389cfb088904b4beb0a8e057a029d0aa950b

  • SSDEEP

    12288:7lyk5v02mQsKcBhHM4rfdeEuNbNIg9uOBU:sGrkKcB9dfIEbB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\aaa429ce1f041efe98d06e16eb62e6c2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\aaa429ce1f041efe98d06e16eb62e6c2_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2548-0-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2548-1-0x0000000003260000-0x00000000032D5000-memory.dmp

    Filesize

    468KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.