Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2024, 05:29

General

  • Target

    b68247ec05cea50e440218db37057b93_JaffaCakes118.exe

  • Size

    1.1MB

  • MD5

    b68247ec05cea50e440218db37057b93

  • SHA1

    69c146865428c10d718d26ed425fe9a76652dfd1

  • SHA256

    002179b7b3b4ae19c8497729b53709c90c3dc6febb0856b34c0cd4cc76df68f6

  • SHA512

    4552f54f427bd6a0c3413f2d54031be4b61d282a8380598867a3217c862c46443f80fe10840161d6ba494bef0ff04bb03834768eabb2c0e8fbaf5ce2b28c7de8

  • SSDEEP

    24576:NezN5cXJD/zZWH6q25Qg2/p5+qrwndK5b2C/eq6:QB6xdV52H+CI5T

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b68247ec05cea50e440218db37057b93_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b68247ec05cea50e440218db37057b93_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1504-0-0x0000000000400000-0x00000000005EF000-memory.dmp

    Filesize

    1.9MB

  • memory/1504-1-0x00000000001C0000-0x00000000001C3000-memory.dmp

    Filesize

    12KB

  • memory/1504-2-0x0000000000400000-0x00000000005EF000-memory.dmp

    Filesize

    1.9MB

  • memory/1504-3-0x00000000001C0000-0x00000000001C3000-memory.dmp

    Filesize

    12KB