Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 07:02
General
-
Target
2ce19aee2f1c6b7817d8043a3b69a7b7_JaffaCakes118.exe
-
Size
731KB
-
MD5
2ce19aee2f1c6b7817d8043a3b69a7b7
-
SHA1
b788e07c606c6da029707b39dde01aca4252fa52
-
SHA256
48e076a48034e9d125cd09a3134cf73392d72e4ba922535071a54a5dee2730e2
-
SHA512
b739be4ff471f5e225c8b3725f9bc745c3cc956b87e4f80eb3c5c4e3558649e7149d14b2cb234a4f242b6275a770bc4c552bd8d174b971a46ac233b2c6775f44
-
SSDEEP
12288:YuudeYcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQfP7NXy0mQR8Y5N9OQtMH6:YueeYT/hmflRBmqPeQ93D4AQXBC0V5s6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ce19aee2f1c6b7817d8043a3b69a7b7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2ce19aee2f1c6b7817d8043a3b69a7b7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow