Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

d5a95d2692...18.exe

windows7-x64

3

d5a95d2692...18.exe

windows10-2004-x64

Analysis

  • max time kernel
    31s
  • max time network
    42s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/09/2024, 04:36

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Machine shutdown
Report Analysis Logs

General

  • Target

    d5a95d2692ec3620a68c44edd8450f32_JaffaCakes118.exe

  • Size

    118KB

  • MD5

    d5a95d2692ec3620a68c44edd8450f32

  • SHA1

    0f55450b5e7ccf1c5fb7b50e605b044f66ed57fa

  • SHA256

    16e079228985b3b8bbcab51f55a45dd60dc265008e47c4b3057643b56602eff6

  • SHA512

    9494a5d3e85c914bd4e815eab8d42ef2c8e46a89742e917b35de2846b67f6985bbc023718209030b96cd95b37d1024dbfd50090882f62ef8341dee15ef35d3b0

  • SSDEEP

    1536:6W9YLH0zooTimDNhKf+AYEPbZYzm37a16c0T2ygSP4nMD4zsKSO4kSuoWMlzIJ:zE0TT9mBVO41hPso4zs2HoflzC

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\d5a95d2692ec3620a68c44edd8450f32_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d5a95d2692ec3620a68c44edd8450f32_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads