Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
84s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2024, 10:25
Static task
static1
Behavioral task
behavioral1
Sample
aedd84b816b282bc6ab6e3ac349b276d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aedd84b816b282bc6ab6e3ac349b276d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aedd84b816b282bc6ab6e3ac349b276d_JaffaCakes118.exe
-
Size
1.9MB
-
MD5
aedd84b816b282bc6ab6e3ac349b276d
-
SHA1
714ee2b4af4219cee3f411c624c0875f3f4b18c6
-
SHA256
47a02d333658ed89f676206285a6a4cad4660a58e04900f0e6fa3d423622e20f
-
SHA512
5c8cf049a9910bd8f0e714fbb2ec5d42fc51a3c82c79febe52a73d2fffb13829433220d9594a456c50daad2db5975b4dc5081f2ad450edcce5ab12296858cb3b
-
SSDEEP
49152:sv8QbBnW5oGvmx4UJASuA4wDinashps9AzV1pCh9mLsVt:XSBnW5d+lub3asPs9S7pcr/
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aedd84b816b282bc6ab6e3ac349b276d_JaffaCakes118.exe