Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/08/2024, 12:38
General
-
Target
c0c2b816cb5c469f15403c6845791e27_JaffaCakes118.exe
-
Size
31KB
-
MD5
c0c2b816cb5c469f15403c6845791e27
-
SHA1
0b65ca115110c4a772efb9d385b1275b74e08d79
-
SHA256
c1159261eb0d9929ab0206de8d0eab63c2f3386e3b13054a5dea9da855aacbb5
-
SHA512
de5c08ebfa4e74d1158ee92206fe432f7ca8288a3c6586b7a4625e609a53971ec09d4c37e51908b6eab1b465bc27df1d29da6e2aa1cc9c24f03c11c8c4807b91
-
SSDEEP
768:zIPfXOhlKoLxtCt74y/842kGim5admgS0CX0MBc:4CKoLD+h/84UimkdxMBc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\c0c2b816cb5c469f15403c6845791e27_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c0c2b816cb5c469f15403c6845791e27_JaffaCakes118.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
4KB
-
Filesize
34KB
-
Filesize
76KB
-
Filesize
34KB
-
Filesize
76KB