Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07/09/2024, 19:41
General
-
Target
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
d2b2320d636d841a7057b7457da8ac7a
-
SHA1
73d569f92080ddf7ef770d6a9f0e1fa4cc25ac28
-
SHA256
8178a4bc85b0f09b549be249e77ac6b071b6d9a67bc065afb795e0f3c3da1fea
-
SHA512
3c3e112c6f5c3eac3618e95ffd08c97906a2b5389a0d680f15208457f9197b4b545c9c38267f12f2233927488335978e7065ea090f40a27a03e615c339afb187
-
SSDEEP
24576:HL59d5HT7i1sDGy3oneyiGfCCTNQype1bPSJdcLhAC7o3M0dXHJoog73v4wSsrq6:HFpW1sCriGft5Q96JkXoXlK3AwSMqDG
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
484KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB