Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/08/2024, 03:14
General
-
Target
8d17530824a019a1845f31b609902f3e_JaffaCakes118.exe
-
Size
136KB
-
MD5
8d17530824a019a1845f31b609902f3e
-
SHA1
bd5c488380b4729a5b555833056c508165ab19aa
-
SHA256
3c9f893b519d392377ffb4d3558f3af7c1490ad154f28aa94a841b33c006e99a
-
SHA512
398af9d9db6f38a78f5fe7ddabc81cf460b2c182f5254366a9a476bc4e56f2b956dffd44e1387ece845d34e2e7dfda1e0cb751aad31e0ee0bf44ecff245ea4a6
-
SSDEEP
1536:JbSIOG8fa9dpKjde38vcYJDVheFEcuP8FD/X4wQxPQ838RdTG2efa9M:/Og9dpyvc4DVheFEcciQHC9G2B9M
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d17530824a019a1845f31b609902f3e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8d17530824a019a1845f31b609902f3e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx