Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/10/2024, 21:18
General
-
Target
0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe
-
Size
651KB
-
MD5
0c7d670598b461b9da0eb86d5e12dbc1
-
SHA1
c1d8535945ccb5da250712e19a56035e4dd128fb
-
SHA256
9bef17338c0d40383898edabfcd4646bd1f9ea672437ea1baa0484566593d2fb
-
SHA512
74c716839056be32e1ee110e4409c2ac300678c59d9dbbf969d16c9167cb4f2842dbb0b0823c1876220398e4038db327fabb82eb74b3d7960201e7791992c2dc
-
SSDEEP
12288:jMguPPwVws4FIpMQ70cC62QOZFgQURMkX63+SH7XtEPQ8xdzq8TFlltl:jMgdwC60O3gdZX6NH7XtQQ8xdzq8TFfj
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0c7d670598b461b9da0eb86d5e12dbc1_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery