Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 17:05

General

  • Target

    0bb2c9fa052921012d29d95ec794a6dd_JaffaCakes118.exe

  • Size

    380KB

  • MD5

    0bb2c9fa052921012d29d95ec794a6dd

  • SHA1

    f72b8b078a281c438477ff007cbc134164cfc21e

  • SHA256

    6441154a13cbdd4e555c45bfc01562bb659d59c116d31bdebbcad9c14f97b341

  • SHA512

    8d7ded6fb81b7eea87c489c2686d95f2b83989f7b2848aad75de774af3f5ab2a1887343551a87ef1eae956e0d8ee029e7e67ce3a382315ca6b54c8b6e1eb3f07

  • SSDEEP

    6144:kXsB7rtp/nWdoxpRThhSRiY4xBPKQwbFAE805RXUELjJoxGq6IEm02bvGDU:kXsNtp/EoxpRFoqBProSE8qFYGq6I0YB

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0bb2c9fa052921012d29d95ec794a6dd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0bb2c9fa052921012d29d95ec794a6dd_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2924
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2924 -s 272
      2⤵
      • Program crash
      PID:2104
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2924 -ip 2924
    1⤵
      PID:2284

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2924-80-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-128-0x0000000077AB2000-0x0000000077AB3000-memory.dmp

      Filesize

      4KB

    • memory/2924-180-0x0000000077AB2000-0x0000000077AB3000-memory.dmp

      Filesize

      4KB

    • memory/2924-193-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-192-0x0000000077AB2000-0x0000000077AB3000-memory.dmp

      Filesize

      4KB

    • memory/2924-191-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-190-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-178-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-166-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-129-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-127-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-63-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-61-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-59-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-57-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-55-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-51-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-49-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-47-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-45-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-43-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-41-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-39-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-37-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-35-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-33-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-31-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-27-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-25-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-23-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-21-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-19-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-17-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-15-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-11-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-9-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-7-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-5-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-3-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-53-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-29-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-13-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-1-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB

    • memory/2924-0-0x0000000000440000-0x00000000004AC000-memory.dmp

      Filesize

      432KB