Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/10/2024, 04:48

General

  • Target

    2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe

  • Size

    768KB

  • MD5

    2b1e1853d4434f064311acd20be1f1b2

  • SHA1

    097c4cf4acdccccc85a610700b83df4fe89939c3

  • SHA256

    67a6139bc6100eed4911f1795109538ebd04a31a4d86155ee6cc2f2e44b7d926

  • SHA512

    3dcea32a8ee32f0a4c227d4d81f6f2ef9a364aea9c255c8db5e8a2d0b905f3a89dd37b6a76ab987c65d7cbdedec8795cbac9fed667fcb7d2131b4bebee133b44

  • SSDEEP

    6144:irZ76yrqM4hcbvwtCEQ9upcXADnZkm4DIcoRYAaeH1RDJoolnr9s7tqyE2fnpw1F:i7LWMZiCEQ9uYBeTH1ReSm7tCBRWE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads