Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2024, 06:56
Static task
static1
Behavioral task
behavioral1
Sample
c03037c3b0cd5c6beea2a2bc6abdd97b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c03037c3b0cd5c6beea2a2bc6abdd97b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c03037c3b0cd5c6beea2a2bc6abdd97b_JaffaCakes118.exe
-
Size
135KB
-
MD5
c03037c3b0cd5c6beea2a2bc6abdd97b
-
SHA1
b779ee3a892ef6a777808958a68e23257fc30292
-
SHA256
0e99c042e73cc71dd691e7213a9ae9b39d92090f7edbfae35362ca560458f122
-
SHA512
75140d8b3fedb9f3a49a7a8b5e6096476fa8ea8612c965e8f05b0d9b556ac7dc19df0423bc7da52acf2e8d967348a6f2ac92c21d9344cbba843ce653fd12bfba
-
SSDEEP
3072:IxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Z/ccqcPJw:q2pdqfv2IPOGfXf5ovWJUKPJw
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\dextor32.exe c03037c3b0cd5c6beea2a2bc6abdd97b_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c03037c3b0cd5c6beea2a2bc6abdd97b_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
135KB
MD5c03037c3b0cd5c6beea2a2bc6abdd97b
SHA1b779ee3a892ef6a777808958a68e23257fc30292
SHA2560e99c042e73cc71dd691e7213a9ae9b39d92090f7edbfae35362ca560458f122
SHA51275140d8b3fedb9f3a49a7a8b5e6096476fa8ea8612c965e8f05b0d9b556ac7dc19df0423bc7da52acf2e8d967348a6f2ac92c21d9344cbba843ce653fd12bfba