Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/09/2024, 19:56
General
-
Target
ec15f2c5b92ad849e29afd3e0281b8c9_JaffaCakes118.exe
-
Size
443KB
-
MD5
ec15f2c5b92ad849e29afd3e0281b8c9
-
SHA1
2f25bc6dcf4b288f56f3e90652d230ae81f82a4e
-
SHA256
b6fd9f3fff8ac06364cf79f633c1c0e147e82fb70c3b3ac9a80ec4d0081a5c96
-
SHA512
8580704c57efdf1b2666c8e134511e6e4c4f55e1497d338030c4749abed69c440829d09bcf2e8eb220e1032898a9d0778195a613358e389836506505d1d382d8
-
SSDEEP
6144:PeEGq0Vblu3xIab8e+KuhtVWsM6+2K7SJjAEJpW5mL4Mw9sr/aEFqH1rCTDCRYl9:j8Du3xp2jhtVWB62uJ3JpW532FQQCM9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec15f2c5b92ad849e29afd3e0281b8c9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec15f2c5b92ad849e29afd3e0281b8c9_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery