Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13/10/2024, 04:43
General
-
Target
3ddca0e603db7678489f039b59056413_JaffaCakes118.exe
-
Size
547KB
-
MD5
3ddca0e603db7678489f039b59056413
-
SHA1
c231e1fe4d7b3c04f452b8fac13d0230e4170aa1
-
SHA256
458948260729811d668791db1fffd865d736caaf99bca45c91d93bdcf31bacc6
-
SHA512
84bf0fb4e264cf0329cd54427e8786f6945844ed0fd2d0a2fe2c877e1883a6ddef604cb1cca258f3d63c3e9a77a819a5a945266b13e0fe9c1de2e1e5dade694a
-
SSDEEP
12288:0uud1YcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQf4CR5TqCNN:0ue1YT/hmflRBmqPeQ93D4AQPr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ddca0e603db7678489f039b59056413_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ddca0e603db7678489f039b59056413_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB