Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 21:18

General

  • Target

    0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe

  • Size

    651KB

  • MD5

    0c7d670598b461b9da0eb86d5e12dbc1

  • SHA1

    c1d8535945ccb5da250712e19a56035e4dd128fb

  • SHA256

    9bef17338c0d40383898edabfcd4646bd1f9ea672437ea1baa0484566593d2fb

  • SHA512

    74c716839056be32e1ee110e4409c2ac300678c59d9dbbf969d16c9167cb4f2842dbb0b0823c1876220398e4038db327fabb82eb74b3d7960201e7791992c2dc

  • SSDEEP

    12288:jMguPPwVws4FIpMQ70cC62QOZFgQURMkX63+SH7XtEPQ8xdzq8TFlltl:jMgdwC60O3gdZX6NH7XtQQ8xdzq8TFfj

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2192

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads