Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
30/09/2024, 15:38
General
-
Target
0217cc41a4fd3a7a2fbaee983382d767_JaffaCakes118.exe
-
Size
312KB
-
MD5
0217cc41a4fd3a7a2fbaee983382d767
-
SHA1
2f4ec446e5778061a5eb6637a9ed4bd506dc2bc1
-
SHA256
6cd789c18a5f2f605ffce5856a3b1f974e80acbd7ff17ce97e30a50d428ffa57
-
SHA512
adc8d9436806124210858ca0f565b46d8af0222270506f35be96aea946217807f7d7f89cc7f39d9054a93d5bb73583f209be4ea35879a8c93fa145139a07bb82
-
SSDEEP
3072:lILKezn8+NYc4IyvO+e9GnIamn8AxeshjlY7KG+a0QWPLc+0GpVi+LkulYUWj8JH:0Xj83c4I8nRmnlJjeOngGLcmuq4ioC3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0217cc41a4fd3a7a2fbaee983382d767_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0217cc41a4fd3a7a2fbaee983382d767_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx