Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

4620f6fc45...18.exe

windows7-x64

6

4620f6fc45...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/10/2024, 05:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4620f6fc45c5c99fe81016ebc223dd4b_JaffaCakes118.exe

  • Size

    143KB

  • MD5

    4620f6fc45c5c99fe81016ebc223dd4b

  • SHA1

    36640da2789e8bbd5064d85c033319014ef4f085

  • SHA256

    e90f0cb9e30c68b6ef22556018d9e82d5614b855236d088065df80115c9e4ea4

  • SHA512

    0f7498db8ea10aa4b9309e2b4c58967e5f1c56a6cc6cce214afb38ed1b349a5b58505879ee8d0378a4a1cf61e0d63063504441d6261d402e2c6e254e99c7f77e

  • SSDEEP

    3072:FsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XY:FplzpTVDVa2en/V6Mp

Score
6/10
discoverypersistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\4620f6fc45c5c99fe81016ebc223dd4b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4620f6fc45c5c99fe81016ebc223dd4b_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    PID:4780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4OVS68NE\tasks[1].htm
    Filesize

    5B

    MD5

    fda44910deb1a460be4ac5d56d61d837

    SHA1

    f6d0c643351580307b2eaa6a7560e76965496bc7

    SHA256

    933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9

    SHA512

    57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1

    Download Submit