Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
19/08/2024, 10:24
General
-
Target
aaa208d7997e3e31f0dc91c69be85cb6_JaffaCakes118.exe
-
Size
868KB
-
MD5
aaa208d7997e3e31f0dc91c69be85cb6
-
SHA1
d3bbac0c6c8f0ad2bc585e575b5d51e92c34e7f4
-
SHA256
4ca8226a5fc4e262caf9cb9b5de889f1ceb81ba118aaabb1e183455641971d56
-
SHA512
07514ea92fe281814870a78ed0195623b17b638e5de5bb4d70cbd9da4e98b6219ce7d87b850e1ebb1b7ff7f70d0bc0a940d0a8a01bf793942fd71392589c1aa6
-
SSDEEP
12288:Pj5Z1jqtDqFPk/vGbhngXAqgVpbzh2WlU8eLe/GJ+6Q/RpQe:PEtDqFP6vyhngXAqkhBlMe/4NQDQe
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aaa208d7997e3e31f0dc91c69be85cb6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\aaa208d7997e3e31f0dc91c69be85cb6_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx