Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
18/10/2024, 08:30
Static task
static1
Behavioral task
behavioral1
Sample
566c7c05bee38763257bd6f6adbb6a1f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
566c7c05bee38763257bd6f6adbb6a1f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
566c7c05bee38763257bd6f6adbb6a1f_JaffaCakes118.exe
-
Size
726KB
-
MD5
566c7c05bee38763257bd6f6adbb6a1f
-
SHA1
9f31d7de9573e57cc68de9b22fe06329ac80c4d9
-
SHA256
7f214b8f741b20517819dc9a0edfba94353b35d1de310e8d4696572bc402c31f
-
SHA512
f1e71e582e39b589a40c230ed249849d756fabf72779dda6623824139b0a48e9375a072bf6e9c6feaae95a8abf8056df0dd4084f16325364e5c2744c79bfba1d
-
SSDEEP
12288:yxOHVEYR6T9SO7J9+4ppU0kkLxn3If1/gitwWH2aXGXAO4g7RXmxl5V4Km1FVgh6:yx4WYR6JSOF1paVtwygJ4cRXc5c/eOT5
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 566c7c05bee38763257bd6f6adbb6a1f_JaffaCakes118.exe