Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/08/2024, 04:20
General
-
Target
b214d49355605c8b3ca7b519a88fd103_JaffaCakes118.exe
-
Size
10KB
-
MD5
b214d49355605c8b3ca7b519a88fd103
-
SHA1
9e4c3c4d09187b394a7df5388b384002876ee122
-
SHA256
0d316aadbb432a33569b16a3913e587c01d4e0da459f7a04d243efe32ee83897
-
SHA512
328d3bfb51f066d221b152fee85b5e612bf35883a028a2143ce8698ef6e8cdacd0318ab4aefe8b46e0aaa2c477157b3076d9356f5bab41a1bc2692fc3a28e6a6
-
SSDEEP
96:YtS7pqhOzhdN8IY/+7aeA/OfSjn4S+hqXnYmz6dz6yncevz6vuegOZxOovv9R1La:rNNzdxkUA/Bq4YlEyncjWOZ39570C0H
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b214d49355605c8b3ca7b519a88fd103_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b214d49355605c8b3ca7b519a88fd103_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
32KB