Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
19/08/2024, 14:16
General
-
Target
ab5a745b94480c588de8d9edc833c259_JaffaCakes118.exe
-
Size
355KB
-
MD5
ab5a745b94480c588de8d9edc833c259
-
SHA1
50749d4551dbee0f9b5b2b970065a392bc56cc1c
-
SHA256
da0392a5cca300029452368c916c1e0903077fbf48acbad7b461a909a5d38461
-
SHA512
351782d62a92fbb497afcc9e460dc96ea79f847fbc646a6b45cce838b1035c4f9d3bc587091947cf2f311ab1b879f6c74c1b640c1e5b7f56fd94081c797ab88d
-
SSDEEP
6144:7Qw0WAtKvhICR0U6C6XxfmVD4VQy2/qBDZ3+C/CjqMrsG8C1Ncys5:0w0WAtKZPeRONp2Z3+ejCMZ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab5a745b94480c588de8d9edc833c259_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ab5a745b94480c588de8d9edc833c259_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
876KB
-
Filesize
4KB
-
Filesize
876KB
-
Filesize
4KB