Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
01/07/2024, 20:23
General
-
Target
1c603b0df878bc9b09faddb9841375cb_JaffaCakes118.exe
-
Size
101KB
-
MD5
1c603b0df878bc9b09faddb9841375cb
-
SHA1
8425ec12975168ec28cca52ec114429ddc06663d
-
SHA256
3fc1f2f98aa3be52ed7b5babbd8b5f42caf9253c59435d62ae017ba753c1b8b9
-
SHA512
57dcf9c91d94d7d768ddd1f3de5cab9e7d6807e8369f8c6a3ed759c8194140906bd28280f86a52e0241d50aeebf5712dd48d4bc54aa9e1a089ff276434438940
-
SSDEEP
1536:gazleXQ/05IFeV9jtm80BykH39gjnZAPPDr2WHFvLqJNj2:gQeA/jFe7jtF+XH3GADrVHFvLqJB2
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c603b0df878bc9b09faddb9841375cb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1c603b0df878bc9b09faddb9841375cb_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
128KB
-
Filesize
72KB