Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 09:48

General

  • Target

    fc08c1f1a1835c2353e0f82d39ebbd37_JaffaCakes118.exe

  • Size

    96KB

  • MD5

    fc08c1f1a1835c2353e0f82d39ebbd37

  • SHA1

    90622d4f2fd73f41004dac9f18e3fe011c325c3a

  • SHA256

    2cda1f2e9f519a858322940bd60b75ad6890b0e6a5072aed3424e0ee91105464

  • SHA512

    fd2f3ffdf3dc0f911be83e3476a0dde9e48d2ca96c367e7ceb4edaa66260ce7c2222988b8c3178643f22970c2953f6a08dd0ebefa255c151a674f6ea12ddd71d

  • SSDEEP

    384:nLOHuzYDC9S0scuX6wk5oquVP+iv1gPXolmb6ort/Ut8wtzpZ2KWynLKquVP+k1:SO8GbscuX6wDquFawod/O2amqub

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc08c1f1a1835c2353e0f82d39ebbd37_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fc08c1f1a1835c2353e0f82d39ebbd37_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4760-0-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/4760-3-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB