Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13/10/2024, 05:57
General
-
Target
3e2ea5fd47d34699851c8aef2bff5b42_JaffaCakes118.exe
-
Size
7.4MB
-
MD5
3e2ea5fd47d34699851c8aef2bff5b42
-
SHA1
55ac0d16024f9d61a7f89c7c620ec68105807e64
-
SHA256
778edcd5a6e8f44bdcc3fd8523f812a7e209db179b507cabc43691e19a3e80d0
-
SHA512
27a29eb58dfe8f54e7e52ff7c4c3e24d6bbf4756b7ff653273a8aa6fed0c7585cc578e01c92428eab5d3f72cb5f1b9d5e8bc57a062b70594c185a8860002164d
-
SSDEEP
98304:b9WbrXSq7eRd6rZCCzm+wO1l3DHnshMPh9JXprvCRWfdWeSj1raVn7DFjeA/thlt:b9sz7yWoCzDt1RDHshA9pprvoWf3LLsI
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e2ea5fd47d34699851c8aef2bff5b42_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3e2ea5fd47d34699851c8aef2bff5b42_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery