Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f072eeeae8...18.exe

windows7-x64

1

f072eeeae8...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    94s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/09/2024, 18:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f072eeeae8a449bc8e1360bec46cdbc1_JaffaCakes118.exe

  • Size

    126KB

  • MD5

    f072eeeae8a449bc8e1360bec46cdbc1

  • SHA1

    5906b8e9666f4996a518a0053bbb5d9ff79ac998

  • SHA256

    411c64d1e02c8f2b8f97d1367afc38c80e516aeaae6b683c1203cd00b4c311e3

  • SHA512

    084e0b5d30a29b84441773124fb5ecc838a4bc157b67961e6b2a5be998f843256e3845f6f76d6351d6868204e5e01658c47e6c6dc33542056017cd3f75941651

  • SSDEEP

    3072:jkv+2ogyJ7yV9IYys2JDWdqHuMb3Kjh7CpOl2nNP7U7HNP:wwgyJ789Ys2JcwuKa2k2ni7t

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\f072eeeae8a449bc8e1360bec46cdbc1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f072eeeae8a449bc8e1360bec46cdbc1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/748-0-0x0000000000400000-0x000000000045D000-memory.dmp

    Filesize

    372KB

    Download

  • memory/748-2-0x0000000000400000-0x000000000045D000-memory.dmp

    Filesize

    372KB

    Download