Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2024, 16:57

General

  • Target

    30f5183a75ee3e3ace5e51669674f7fc_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    30f5183a75ee3e3ace5e51669674f7fc

  • SHA1

    f33309d76a77980ecfbd5566ab30f79e308dfc38

  • SHA256

    b7316410079c1db162b691385a1dc1f0479f8caf04d982a6c89a4a3706909eab

  • SHA512

    700d88344173cac113c23ea824c0bc44d55d8c8b2fe89a9372a996e306f9ce08d1e27f79f7d8a37414a1351781c13774f9661d773f2117fbb57b86e1dd444edc

  • SSDEEP

    24576:RQtAWo020QW1bWFEV9Y8KwP02pU/H8atktOrUx+kclEp:Crv20Q06WV9Bhpg8atlgx+kcl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\30f5183a75ee3e3ace5e51669674f7fc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\30f5183a75ee3e3ace5e51669674f7fc_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1912-0-0x0000000000400000-0x000000000052F000-memory.dmp

    Filesize

    1.2MB