Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
23/08/2024, 03:16 UTC
General
-
Target
ba24e0f2883697d1ca5df048fc571b75_JaffaCakes118.exe
-
Size
24KB
-
MD5
ba24e0f2883697d1ca5df048fc571b75
-
SHA1
1aa89dfa5eac22361aad37092e1bcbb49eb22c4e
-
SHA256
1ce6aeb560b0f592a11ca228ea38bddb286ffa3e07ec027a84f016c100a6a760
-
SHA512
527c5b045d368aa461a450a9fd87f9783dd1c556745ee552f905361fbbe82b6310c98f7052810db9c96f0e86a632672430d48a6af5e8d14d203d92735154f422
-
SSDEEP
192:CmqG+GCWyUuWEBKfvH7D9M6Ly36rkmRnTiT5n9MtDyFCivCvl5x5rBxEh:CmkpjV2v79nRmd9mDyFpvCpzxEh
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba24e0f2883697d1ca5df048fc571b75_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ba24e0f2883697d1ca5df048fc571b75_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
-
DNSupdate90.dnsd.meRemote address:8.8.8.8:53Requestupdate90.dnsd.meIN AResponseupdate90.dnsd.meIN A94.229.72.118
-
94.229.72.118:60077update90.dnsd.me
-
8.8.8.8:53update90.dnsd.medns
DNS Request
update90.dnsd.me
DNS Response
94.229.72.118