Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/09/2024, 14:49
Static task
static1
Behavioral task
behavioral1
Sample
f63f6b029aeace284d09a67b3a53a698_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f63f6b029aeace284d09a67b3a53a698_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f63f6b029aeace284d09a67b3a53a698_JaffaCakes118.exe
-
Size
145KB
-
MD5
f63f6b029aeace284d09a67b3a53a698
-
SHA1
befed0a008ae0b3d8cd48a91520f6ff9a03c6aaf
-
SHA256
d4db4d19b594aee5ea32d485fd85b8aedd2aef5732804308b32129a51e28f324
-
SHA512
ec64e2c2617f9bff6e9d7968927b388d5b3b356d6966c7df1a11c3b70520f6780d5ec97c600911dcc6eb3ff74b87e31caea8c5affd60a0352e2783162849e5d1
-
SSDEEP
3072:3ViATZgSL5ZllFpe7ITbsQIJzabJbHTwEs6mT9qVDkEmjxtG6f2Siv77Kxgn:liSLvDyUvZRlbHM+mhEWjxtG22SivJ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f63f6b029aeace284d09a67b3a53a698_JaffaCakes118.exe