Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/09/2024, 03:45
General
-
Target
d59a9f05211aee67c4c590c9f3d74278_JaffaCakes118.exe
-
Size
216KB
-
MD5
d59a9f05211aee67c4c590c9f3d74278
-
SHA1
429b48d021e70d9a15982db8a6372e9cbd65b446
-
SHA256
09dc8c4c369ead810a932be2c52d9094ded4e4a0dcf9df668fb69b7177ba9a02
-
SHA512
40a96086faddada14de281e779d4d7d23fab62c794911a357b34d073907e5b40f38a1564cd20a2f8131477f8642d65e9ba60dc13fb38aa4531abcc25935dbea1
-
SSDEEP
3072:XVb/LPMa9nL2avCnNH6Fs97FzAf2J7yd9vsOcRz0domfhPghv:XVzLPZL2avoHL9Ft7eNP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d59a9f05211aee67c4c590c9f3d74278_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d59a9f05211aee67c4c590c9f3d74278_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx