Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 03:18

General

  • Target

    f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe

  • Size

    781KB

  • MD5

    f50e8ca8fbe942fed161d5086c466b6b

  • SHA1

    7bdc10a0dde965a7662562870a272e28e7b404a2

  • SHA256

    9292ca65d034f20630463185a4e034eb9b84cefbe83894f7d8ff1c5d284c1f8a

  • SHA512

    e286151c42e4eaa37bd602aa2ee553cf34caa48d15964704d384fde0b2ef7e493195ed086f10d50b493315d96d4dc6d77d5d38b533226fe93c444c04fd1a0000

  • SSDEEP

    12288:dEnpDtorPcAWEb9KgA2Br1cgk7QzFquv5Rff71zN4QIz0cYTKtAHMnhyEQFMScsS:dlrvBUcr1aQPdhzeycc2tQmTsKX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DDEnet.emon

    Filesize

    43B

    MD5

    ff35905227247f845a5ba156c57f39bf

    SHA1

    f2c068b82781bf70ab30129eb0bf8809b49aa270

    SHA256

    098b176eb2784b37fb829328e6e2f29ecf72b40bf9c9d0fce35cced076122fe4

    SHA512

    cd191468c36f5d811c3984cc673d763d6314627ec7fdf52367e1f2d28126d000f8a875c1325d116c0c4d0729f47fc91ddcfc682bae74162c13d1a9257b194611

  • memory/2032-48-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-52-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-55-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-59-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-66-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-70-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-73-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-77-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-80-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2032-94-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB