Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 18:15
Behavioral task
behavioral1
Sample
a7b3a7d85d5d90bdfaba89e493e9ed70_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7b3a7d85d5d90bdfaba89e493e9ed70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7b3a7d85d5d90bdfaba89e493e9ed70_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
a7b3a7d85d5d90bdfaba89e493e9ed70
-
SHA1
265ad1041d028cdc2f0f62850b8cd03ba06a187b
-
SHA256
315800dd3da52118c4dda859d1f51fa6daffacc1b3a34a248d6ad572b4e5f3db
-
SHA512
3e368a549c6accfd37606cedad5a91a4890692a9619e879a6c8c19ad402858880460f6ecae4482ed0918b73c8ab3f4caa25ab495dc35095cd90690f9e88c1336
-
SSDEEP
24576:TiUf55Z79DAYNcxLY92NVupEzn7f5KaoRQev8ktE8OorTt2Bc7YE+:+Uf/DfNCw+Mi7fMRQRkt1MBN
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a7b3a7d85d5d90bdfaba89e493e9ed70_JaffaCakes118.exe