Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
10/03/2025, 22:03
General
-
Target
JaffaCakes118_619ca2f241b023aadfb4c2efb9ee43fb.exe
-
Size
162KB
-
MD5
619ca2f241b023aadfb4c2efb9ee43fb
-
SHA1
c46ea8aa0ded42e196a8ddaa07be79a6abfed21e
-
SHA256
912374bd687436c5b8e61b44d800e5c3e57fb1d0b426e7d80e950d3f67edd4dc
-
SHA512
b2db9802d5347cdcc34e3c244bb44bebeb3feb64cd4aee05fe38c3413395f0a7004da9dca03dced26a5237dab7463737d77d9f2c1aa1e565e14501625f9e4668
-
SSDEEP
3072:lLoyXFBNyVZqh0C4FjgSI3pd2a7QnFqhh6/3k6M4yHS:lMyByeh0bFMJpkVFqhh6/RM4sS
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_619ca2f241b023aadfb4c2efb9ee43fb.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_619ca2f241b023aadfb4c2efb9ee43fb.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses