Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02/02/2025, 04:38
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7910f73e9cac3a6299ebd7a7417f9062.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7910f73e9cac3a6299ebd7a7417f9062.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_7910f73e9cac3a6299ebd7a7417f9062.exe
-
Size
163KB
-
MD5
7910f73e9cac3a6299ebd7a7417f9062
-
SHA1
34ea5c0a5937b4e104e7037d74b62fbd73856e52
-
SHA256
9b105bd846028bcfd326b4740ef5e625f87ac31c9570cd18e92249e65d961367
-
SHA512
6d365d539c9abb5a100841c7784f6d9a0d78db3e713d227a510d514be312de1ec5d80adae842c57e556a4c17a163b8c7f21a102428de71866d7db740d320ab9b
-
SSDEEP
3072:m5dnu0W5ZyYi+KpM6TWmrtGGF4/jtAf1sRfJhlYqSJd2TZxD8csaE8M1MY:GnxIZhKp1VFWjqsRhdSJcj0aE8TY
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Signatures
-
Sality family
-
resource yara_rule behavioral1/memory/1692-1-0x0000000000570000-0x00000000015FE000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_7910f73e9cac3a6299ebd7a7417f9062.exe