Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
26/07/2024, 07:41
General
-
Target
732792a6f7e7b7c0b886b5f5b29c05a2_JaffaCakes118.exe
-
Size
979KB
-
MD5
732792a6f7e7b7c0b886b5f5b29c05a2
-
SHA1
23aba1aa6a0e01519a82b3c6d25ce30b04f1e0b9
-
SHA256
f774cff34010bf377655b31329e788bfc37a1df15665fbb9210c7ec95441d0b2
-
SHA512
4a410b8c7abb8b2af527ac4903826d6c2060b77ac30d12cdb01a1e50d61ef5de4a6b0bfcae5208a9b6970c9ae986f291965a0e50675e1fe6dabf133d5b16fb22
-
SSDEEP
12288:z7vRfa2GXNsKIcCatvvNqr+Z3l2k/HG5hP9n/uI33FlvbuoQbWyr4sydq3/Smg+y:z7vRCNfBdlX/o9/533F1Cyyr9Zg+TZE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\732792a6f7e7b7c0b886b5f5b29c05a2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\732792a6f7e7b7c0b886b5f5b29c05a2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1004KB
-
Filesize
4KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB