Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/08/2024, 10:12

General

  • Target

    be602ca6ddd24492bc74c749d313646d_JaffaCakes118.exe

  • Size

    138KB

  • MD5

    be602ca6ddd24492bc74c749d313646d

  • SHA1

    e45b6d37792e4a6f47245fe90ab69dd4d0363af9

  • SHA256

    c6d8baad06ed74c83df58922e84d2ac0ef42913d0c281045f1df15d28d697c97

  • SHA512

    68158201b5fd92094bd03ef225f5808433ab84b959ce41fd9101b0c7470b0c1ac962bb7734923a27dda3637f53200a3b49c35f327534888f27fd10897eb647a7

  • SSDEEP

    3072:7tsaT9r2uHKN/BDzh/5jrCIHer7Zmv3HSruNyLamWjMAKdWrc:7Gahr2uHKNfYJmaiNyVWPdrc

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\be602ca6ddd24492bc74c749d313646d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\be602ca6ddd24492bc74c749d313646d_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads