Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

b758ce8749...18.exe

windows7-x64

3

b758ce8749...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2024, 10:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b758ce87490fd8b869e27225b8e940ac_JaffaCakes118.exe

  • Size

    245KB

  • MD5

    b758ce87490fd8b869e27225b8e940ac

  • SHA1

    8309e2f13027e875ef67284d3d7af6007864f9cf

  • SHA256

    2c03ebe1bef11d2835313a7cabb34596e2631eb729f76bc7dae1e2e763ce91b5

  • SHA512

    102a773b9af1db4e1b43ce56750389478e0c9f4743c6ae22eb5d8e879fa52eba13d52414c1d9f2ce99d9f573e4ab4d2bf3202f43a319f5e85e4abf507060b838

  • SSDEEP

    6144:3XJRGB27D0H4zoD8MTE7Y6bpWdOHi1inEpqJG+LMsAplAUQQlxC2P4:qgzhMTE7YPdOHiinEpAG8MsKZlPQ

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\b758ce87490fd8b869e27225b8e940ac_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b758ce87490fd8b869e27225b8e940ac_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4256-0-0x0000000001000000-0x0000000001081000-memory.dmp

    Filesize

    516KB

    Download

  • memory/4256-1-0x000000000100D000-0x000000000100E000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4256-2-0x0000000001000000-0x0000000001081000-memory.dmp

    Filesize

    516KB

    Download