Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 11:44

General

  • Target

    aae35ed2b43d20a1fd776a941e45a6ba_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    aae35ed2b43d20a1fd776a941e45a6ba

  • SHA1

    cdd3679d2d66bda1c4e4929f0b91f464ce17a014

  • SHA256

    9cbb377e60579750262444cea30017dfc8a3530d0a56b9e111fcb19f71e6596a

  • SHA512

    4749a96ad04280150d1d69069ee60dc85816fbc09c76fff3aa186aa3ef438f741e568d608afec58d943c4bacab3e2b067f2ddc48ea84f19cf91d1efb012ee5bb

  • SSDEEP

    24576:TWd0MpoKsrVtV1PlzAWJCINsipzz3yW0ch4Cblsff:TWd0MpwHl1Dsi1ziWLYf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\aae35ed2b43d20a1fd776a941e45a6ba_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\aae35ed2b43d20a1fd776a941e45a6ba_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1856-0-0x0000000000400000-0x00000000007AA000-memory.dmp

    Filesize

    3.7MB

  • memory/1856-5-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-7-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-6-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-3-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-4-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-2-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-1-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-9-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-8-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1856-10-0x0000000075661000-0x0000000075662000-memory.dmp

    Filesize

    4KB

  • memory/1856-11-0x0000000075660000-0x000000007566A000-memory.dmp

    Filesize

    40KB

  • memory/1856-12-0x0000000000400000-0x00000000007AA000-memory.dmp

    Filesize

    3.7MB

  • memory/1856-13-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB