Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/08/2024, 15:19
General
-
Target
b3fb665235bcaa3c7dd9cd11a4319d40_JaffaCakes118.exe
-
Size
48KB
-
MD5
b3fb665235bcaa3c7dd9cd11a4319d40
-
SHA1
acf6a5ed8e2ebb83a59b2c1fe7c647636e2b3afb
-
SHA256
989a7675c0b12f69010715f138d055f8cf42aeb71d94a6eb5eef5d59578cdeea
-
SHA512
f8c82c813abcac26fdd68919ee8d3e9e81601134afb39e90237f7bb854b3fa1b8fa8194d53b01f33d2217894264d30d5c2efb49f0d37b1e03054f80a6fe51aee
-
SSDEEP
768:1tXOcl3ICm7s2Lv1Zv12SAhKuXMHYiARC7sQ8vGCc3fAR1GGWB4:1t38Rn2SAhKuXMHYiARC7sHvGCc3fARD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3fb665235bcaa3c7dd9cd11a4319d40_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b3fb665235bcaa3c7dd9cd11a4319d40_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx