Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11/10/2024, 19:51
General
-
Target
3687e89d3ad616311470e77b954dd366_JaffaCakes118.exe
-
Size
1.7MB
-
MD5
3687e89d3ad616311470e77b954dd366
-
SHA1
676b5c01e30effaf88f1d141e3e484adb55bfcbb
-
SHA256
aef2b0e364c0828df5853c9e7829de6855d50595f398f75fe0a4c33019ac64a3
-
SHA512
292fa50d7c02b9add94d42a76192c37eb02e9c6ea85a169dce70487365c8ffb0c71ed8ecc8320272b1e5b8a667e003328b575aaa2afe49432f144c69366321c8
-
SSDEEP
24576:0DnFZAb+WWjJNzrh5YAM9t/9lzuaxctgaoM0b2HGpKkub2Vb2E:0DnFMpIdSXlDzG+b2HGYb2Vb2E
Malware Config
Signatures
-
UPX packed file 29 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3687e89d3ad616311470e77b954dd366_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3687e89d3ad616311470e77b954dd366_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB