Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26/08/2024, 05:20
General
-
Target
c25b92529347050d1f112e5a8e425599_JaffaCakes118.exe
-
Size
92KB
-
MD5
c25b92529347050d1f112e5a8e425599
-
SHA1
4861ab0196b7527af80bebf299f361ebf9a5d27a
-
SHA256
d8c1e31427773b32369e8b15d8c1b3ddb9e8b17aae9f9eeffe559b4ff0ad5292
-
SHA512
0a018b8f14fcb96766b91ac95c7e10cda5d1964f0c283372fddf16e9209db21da588b7252f7ddd92735f2bbb044b630134216a8d4387d8b73a947422c0f7e87d
-
SSDEEP
1536:BLo7ANXuemDckkXwpcS5UuQsp1rX6wd9ZSZU7ANXu:y7SU0Wc9uQsp1rXZdv6U7S
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c25b92529347050d1f112e5a8e425599_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c25b92529347050d1f112e5a8e425599_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx