Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    114s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 18:19

General

  • Target

    bcacf4b3d3c43243e4ee384ff7c8f3a2_JaffaCakes118.exe

  • Size

    98KB

  • MD5

    bcacf4b3d3c43243e4ee384ff7c8f3a2

  • SHA1

    21224b711006b5e3bf61ef366a4bd0f284790176

  • SHA256

    814171bc24e9107745df80f0e4131536b1094c42624dc04e4759aefd51b210f9

  • SHA512

    e75b1f744c926e6b9a44caf485b759557ed699effc1bf968fa1a745286be6e321b0dca79b3202467270881d51b0f447ba61eeecde78d1554710f91a31e199759

  • SSDEEP

    3072:eZMJnTeM4cJJAteui6Imy+8s47WVPCtJEgS:2eTeM/pB6fy+8s47GCtJa

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcacf4b3d3c43243e4ee384ff7c8f3a2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bcacf4b3d3c43243e4ee384ff7c8f3a2_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2992

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads