Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 04:48
General
-
Target
2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe
-
Size
768KB
-
MD5
2b1e1853d4434f064311acd20be1f1b2
-
SHA1
097c4cf4acdccccc85a610700b83df4fe89939c3
-
SHA256
67a6139bc6100eed4911f1795109538ebd04a31a4d86155ee6cc2f2e44b7d926
-
SHA512
3dcea32a8ee32f0a4c227d4d81f6f2ef9a364aea9c255c8db5e8a2d0b905f3a89dd37b6a76ab987c65d7cbdedec8795cbac9fed667fcb7d2131b4bebee133b44
-
SSDEEP
6144:irZ76yrqM4hcbvwtCEQ9upcXADnZkm4DIcoRYAaeH1RDJoolnr9s7tqyE2fnpw1F:i7LWMZiCEQ9uYBeTH1ReSm7tCBRWE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2b1e1853d4434f064311acd20be1f1b2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx