Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2024, 20:40

General

  • Target

    c79c3762b6d2b621c585edbb11ad07fc_JaffaCakes118.exe

  • Size

    181KB

  • MD5

    c79c3762b6d2b621c585edbb11ad07fc

  • SHA1

    37687d97e6d09ec13273833131fab08bb9b0e0c3

  • SHA256

    f8bc82f2fa652428bb60cc2786297d752b02224e52a10d5d4e64c4ea0f4950b9

  • SHA512

    11b5e7f1bcaadeb7823f25081938b281213f083ff00c45b373e9ebc6f814e88da98d7684f6c25d553acb80c677a13281c0ccc9e6f85779e7b2b7f020bbb35039

  • SSDEEP

    1536:FbXj9+Wby4TJXzLQmGEpc8ajyw3o9FDrxtF2I/AP+XtGgue2T9gfa7Cy:FLR+0y4TtNEP3o9FD9tTr9Gg7zSb

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c79c3762b6d2b621c585edbb11ad07fc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c79c3762b6d2b621c585edbb11ad07fc_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2096-3-0x00000000002F0000-0x00000000002F8000-memory.dmp

    Filesize

    32KB

  • memory/2096-2-0x00000000002F0000-0x00000000002F8000-memory.dmp

    Filesize

    32KB

  • memory/2096-0-0x00000000002C0000-0x00000000002C8000-memory.dmp

    Filesize

    32KB

  • memory/2096-4-0x00000000002F0000-0x00000000002F8000-memory.dmp

    Filesize

    32KB