Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
02/06/2024, 09:21
General
-
Target
8d98844b1ac31326e62e8655d4737752_JaffaCakes118.exe
-
Size
191KB
-
MD5
8d98844b1ac31326e62e8655d4737752
-
SHA1
d385879b543fad7fd9648c9a1dd4fe31d9a8b592
-
SHA256
1d84b8188e862fc199289a3233548f215ab576f909841cb8bd36e25b45b0e264
-
SHA512
3654e73edda9931020c41c2893d416196377bdc787c88db14c88e40c46c7a7f4b35d1af05cb97434f9e035185e4fef441dd3c96eefde14c3fe6e396245f8d24e
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0db:HAVySV1eY4k437d+4wkTHdS2z
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d98844b1ac31326e62e8655d4737752_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8d98844b1ac31326e62e8655d4737752_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx