Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 14:06
General
-
Target
c8f8d5b8e8ded62a542fdc7f94bdd654_JaffaCakes118.exe
-
Size
3.1MB
-
MD5
c8f8d5b8e8ded62a542fdc7f94bdd654
-
SHA1
fddd05a0901a45ea8ddb435723ac4f071bb0ee6c
-
SHA256
5a9cc987327eec3aedae9c134005dfb22489fd86a7ad5e5378ab5ede7b60b5b0
-
SHA512
1b2268965af0b62f48ba458082796b54fd57f869a13fcac81e60579dd154720f949a02ee04f96ff6b943ddd8c4920e3036eda8d55c85b1e230cbe1574550cf2e
-
SSDEEP
98304:P5MiXdwOLtg/FM/L2L95PEkyoPN0NCrT6pKmr1o:P1I/B58xoeYrT2r1o
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8f8d5b8e8ded62a542fdc7f94bdd654_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c8f8d5b8e8ded62a542fdc7f94bdd654_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses