Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14/09/2024, 04:34
General
-
Target
df8013411eda87c12855cfddc53fa7de_JaffaCakes118.exe
-
Size
220KB
-
MD5
df8013411eda87c12855cfddc53fa7de
-
SHA1
8bc14bdbcd2d0191d64fa26f2a09630dfc521260
-
SHA256
14e87d029fec2af51c0e207e95f5db9462bb8a170585c78b0ed1e914ea4ed0c1
-
SHA512
258e52c95717022994ac3dd475e630743fb6a73ded7f12c86ba0d110708da54837bdc9e595a3933517f3cc1ca265bdf79a9b41b5f29817d39416dce736bfbe6a
-
SSDEEP
3072:KKDAfCDSmJJPHLp1DTJWYOOOOOIg6ZRmViq9cZ8XUxknPN50izRmR6Qb42Nwl:KR8d1DTJ46ZRAqZ8XUKF5NtPQMgw
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\df8013411eda87c12855cfddc53fa7de_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\df8013411eda87c12855cfddc53fa7de_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery