Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
18/08/2024, 04:17
General
-
Target
a55a53f0670658cbe0caf4a47c79b436_JaffaCakes118.exe
-
Size
12KB
-
MD5
a55a53f0670658cbe0caf4a47c79b436
-
SHA1
0451f77abe8b6f6692a847d908a6fa9c8577313e
-
SHA256
1847dd31d7ff0aac64b63c5be31f087190792c558907542b5ef7dfe2ec870d1b
-
SHA512
2c80db0413a12cc8318c6472ceb84c31154b48d0c9ac69ad1fa4a61eab4b238e409d88937b2cee8719ff659a70d68c7fac02814fa58e725b05c4e77b74159de4
-
SSDEEP
192:JQJqLjyobIM5whrjzdZyAXpGG39EuTw8cGFYjA9aikkTj2s5:+3oEESbyAXpZ3xsGajAgu2s5
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 39 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a55a53f0670658cbe0caf4a47c79b436_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a55a53f0670658cbe0caf4a47c79b436_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5f5f8bb46c4bcccb2829aed8abd441a15
SHA14ef344d7e0128ab79c54d7f9c2fd4b76002c23dc
SHA256f3df5c6771dc84092a9c346690d31854c15ce0edb554f8f0f9fc0f62c8926c7e
SHA512f80fa959dd019e2a21dad679da976004419faa690dfd239a9cddc3646b914228613d298e8e261df5823c1217ef08efd109bf8acbc71602d94dbe161dc6f82624
-
Filesize
124KB
-
Filesize
124KB