Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
22/08/2024, 19:24 UTC
General
-
Target
b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe
-
Size
217KB
-
MD5
b8d748d2b77b134b71ffca23055871c0
-
SHA1
c2feaa03f2f212d3a2ee9d7d882dd9ce8d5df3fa
-
SHA256
6d6366b05cc68b224d2a13c8841aa5f3b7356e1f6b8d8d28eea2d9d4bab40357
-
SHA512
fe95144f8550591b1ea5db1b83e3cedf376bd3535324a2fe887f2a2419b26cfeac181fd23a4ab3213a91d1db7ca84c300deadda1baa5c6fea9a055c292bfbb5a
-
SSDEEP
6144:upU0Myvcl/5+oEr9gYMaTz1++E7xMrSJ:uqXykTD2gYnIHCq
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
-
DNSlivedoor.comRemote address:8.8.8.8:53Requestlivedoor.comIN AResponselivedoor.comIN A147.92.184.22 -
DNSyieldmanager.comRemote address:8.8.8.8:53Requestyieldmanager.comIN AResponse
No results found
-
8.8.8.8:53livedoor.comdns
DNS Request
livedoor.com
DNS Response
147.92.184.22
-
8.8.8.8:53yieldmanager.comdns
DNS Request
yieldmanager.com
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
228KB
-
Filesize
228KB