Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/09/2024, 23:52

General

  • Target

    eeae11c12bcea6d64c9e6494bbba7419_JaffaCakes118.exe

  • Size

    340KB

  • MD5

    eeae11c12bcea6d64c9e6494bbba7419

  • SHA1

    3f4bda888c84f9fd1574180d66f67cd1d6eefc0b

  • SHA256

    1cb302b2f3042969c7e6ee872a6296cb1094c0b50462e3b4c578eb6d34e6f151

  • SHA512

    879826370136730c63cf522a9ad8e1e06605e423e3cc9e8630b6b936f0d06aa01aea14b07a4f32122b54fb976ae63d146f1538755d86bd363fbbf10be024d10d

  • SSDEEP

    6144:u2/pimD94XFi8VkGAByIe7jRbugOkyWYYYo4XtCsHWKjN/pwT:PZ4XFiqkdDUR1yWDYokC4r

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\eeae11c12bcea6d64c9e6494bbba7419_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eeae11c12bcea6d64c9e6494bbba7419_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3116-0-0x0000000000790000-0x000000000079D000-memory.dmp

    Filesize

    52KB

  • memory/3116-1-0x0000000000400000-0x00000000005EF000-memory.dmp

    Filesize

    1.9MB

  • memory/3116-2-0x0000000000401000-0x00000000005E4000-memory.dmp

    Filesize

    1.9MB

  • memory/3116-5-0x0000000000400000-0x00000000005EF000-memory.dmp

    Filesize

    1.9MB

  • memory/3116-4-0x0000000000401000-0x00000000005E4000-memory.dmp

    Filesize

    1.9MB