Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/09/2024, 03:18

General

  • Target

    f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe

  • Size

    781KB

  • MD5

    f50e8ca8fbe942fed161d5086c466b6b

  • SHA1

    7bdc10a0dde965a7662562870a272e28e7b404a2

  • SHA256

    9292ca65d034f20630463185a4e034eb9b84cefbe83894f7d8ff1c5d284c1f8a

  • SHA512

    e286151c42e4eaa37bd602aa2ee553cf34caa48d15964704d384fde0b2ef7e493195ed086f10d50b493315d96d4dc6d77d5d38b533226fe93c444c04fd1a0000

  • SSDEEP

    12288:dEnpDtorPcAWEb9KgA2Br1cgk7QzFquv5Rff71zN4QIz0cYTKtAHMnhyEQFMScsS:dlrvBUcr1aQPdhzeycc2tQmTsKX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f50e8ca8fbe942fed161d5086c466b6b_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DDEnet.emon

    Filesize

    43B

    MD5

    2264b55a0c1e3457c4b5557a6fe13248

    SHA1

    d5898adf20505785e8144bbfdc6129794df86010

    SHA256

    30646c81cf105a9c5d751c5ea106e9440780c2cc8a46f4cc932357cc5e7df863

    SHA512

    56020f79ab2e0833ef94b1321f70e788bb7a4bc6ec0c35a4b034f94ea31a72bd61c037a495b43e948f13059f1c9497a9aa033ae8e674021064b941e34c855a06

  • memory/2560-48-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-52-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-55-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-59-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-62-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-66-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-69-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-73-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-76-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-83-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-87-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-91-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB

  • memory/2560-94-0x0000000000400000-0x0000000000747000-memory.dmp

    Filesize

    3.3MB