Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
03d9e3a027330b60fd6031b1fc953a7f_JaffaCakes118
-
Size
36KB
-
Sample
240328-m29knsgf57
-
MD5
03d9e3a027330b60fd6031b1fc953a7f
-
SHA1
daa8f83013bcf88add2685d1a5e85e4dd15ede51
-
SHA256
51fcccedc24aa82da75f648c8d8c2e64a8bf00da140936dc461698a344b77b82
-
SHA512
c7fef77e5e2633184c385525116ea40a8b282bfc8bbef0e6cd55333570ea28a53846cf8acda78df679273ffe4320e81f296db4f4e7b48ac370dc233e70549f0a
-
SSDEEP
768:sPqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJFUbeRvSz/h8X0egJgwa:4ok3hbdlylKsgqopeJBWhZFGkE+cL2Ng
Behavioral task
behavioral1
Sample
03d9e3a027330b60fd6031b1fc953a7f_JaffaCakes118.xls
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
03d9e3a027330b60fd6031b1fc953a7f_JaffaCakes118.xls
Resource
win10v2004-20240226-en
Malware Config
Extracted
https://statedauto.com/wp-data.php
https://markens.online/wp-data.php
Targets
-
-
Target
03d9e3a027330b60fd6031b1fc953a7f_JaffaCakes118
-
Size
36KB
-
MD5
03d9e3a027330b60fd6031b1fc953a7f
-
SHA1
daa8f83013bcf88add2685d1a5e85e4dd15ede51
-
SHA256
51fcccedc24aa82da75f648c8d8c2e64a8bf00da140936dc461698a344b77b82
-
SHA512
c7fef77e5e2633184c385525116ea40a8b282bfc8bbef0e6cd55333570ea28a53846cf8acda78df679273ffe4320e81f296db4f4e7b48ac370dc233e70549f0a
-
SSDEEP
768:sPqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJFUbeRvSz/h8X0egJgwa:4ok3hbdlylKsgqopeJBWhZFGkE+cL2Ng
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-