Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

fc2caa54fb...18.exe

windows7-x64

7

fc2caa54fb...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 11:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc2caa54fbaecdb54e1ed18676257502_JaffaCakes118.exe

  • Size

    870KB

  • MD5

    fc2caa54fbaecdb54e1ed18676257502

  • SHA1

    91a0c6a58dab3d5f947892e1300b637039c79db7

  • SHA256

    edc91c3742474b58df072eb54c45fc7a54ad9a277cd0dc6aff5aed52b8933aa0

  • SHA512

    9b805ab6a2316743a75eafafaab8c86dbbc0c340b3d094bd224650b4d05e6e832ab0ae706ac50638f546af74e7dd541ce913e2c66c7ea2b745f84f279230bea2

  • SSDEEP

    24576:pyx4OMb6pLTMQs4e7j1cOk2xujJ/qv7r5ZxlCjCnnxcW0t3ua:pyx4OMb6pLwQsL7j1ThM9/eHxlkua

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc2caa54fbaecdb54e1ed18676257502_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fc2caa54fbaecdb54e1ed18676257502_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4596-2-0x0000000002660000-0x00000000027A5000-memory.dmp

    Filesize

    1.3MB

    Download

  • memory/4596-9-0x0000000002660000-0x00000000027A5000-memory.dmp

    Filesize

    1.3MB

    Download