Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    95s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/12/2024, 19:09

General

  • Target

    JaffaCakes118_180a970240355483df0d96234e463d6fd8e61ddaf6b61b2a2256f3ff5eb42575.exe

  • Size

    188KB

  • MD5

    da0307aa068c16b658b555f40f65ff92

  • SHA1

    366d2e4795a49dee79f3ac4d53ab403627b0db60

  • SHA256

    180a970240355483df0d96234e463d6fd8e61ddaf6b61b2a2256f3ff5eb42575

  • SHA512

    1f4cd5c49eab9b7738aa69ab74364ceae2bec64a53586f22c3ba2caa77c5bcb4bbf4e7063cf02e27e0394b392f86589b9f4b622a8c4776e38082a978d5be2775

  • SSDEEP

    3072:E4GLzrH1x9gGiEhTJWaq4//CbmPy6siyyOf4RKTPY5Y8Dciv8/:EDaehTHnImK7iyyOf4cTw5PLvK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_180a970240355483df0d96234e463d6fd8e61ddaf6b61b2a2256f3ff5eb42575.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_180a970240355483df0d96234e463d6fd8e61ddaf6b61b2a2256f3ff5eb42575.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4636
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 220
      2⤵
      • Program crash
      PID:4724
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4636 -ip 4636
    1⤵
      PID:3540

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads