Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e5861c9855f07bf88e45d68f63be6b21_JaffaCakes118
-
Size
532KB
-
Sample
240407-wkpcvaag25
-
MD5
e5861c9855f07bf88e45d68f63be6b21
-
SHA1
3ce710dfdc623f730b5634561b2068065c82862c
-
SHA256
1182476a9f2eca86962422104ebd444d9076df8d13eb07aaed33871636616faf
-
SHA512
2033a2933ebd0e69b462f3a009a96b06cf46f26e94574323f433ad296f18f348c5a23953607ffa943f7bef938780a7041852fd88a4e7006b25d6a452af99c60c
-
SSDEEP
12288:Mdt4O//HR3PaIbGLxe0DdlfEES1wH2FYa4ahWMIkqSyn9kA2i7bYsN:inHR3PaIMx7DIPwHWnxjOSynuxi/n
Static task
static1
Behavioral task
behavioral1
Sample
e5861c9855f07bf88e45d68f63be6b21_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e5861c9855f07bf88e45d68f63be6b21_JaffaCakes118.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
e5861c9855f07bf88e45d68f63be6b21_JaffaCakes118
-
Size
532KB
-
MD5
e5861c9855f07bf88e45d68f63be6b21
-
SHA1
3ce710dfdc623f730b5634561b2068065c82862c
-
SHA256
1182476a9f2eca86962422104ebd444d9076df8d13eb07aaed33871636616faf
-
SHA512
2033a2933ebd0e69b462f3a009a96b06cf46f26e94574323f433ad296f18f348c5a23953607ffa943f7bef938780a7041852fd88a4e7006b25d6a452af99c60c
-
SSDEEP
12288:Mdt4O//HR3PaIbGLxe0DdlfEES1wH2FYa4ahWMIkqSyn9kA2i7bYsN:inHR3PaIMx7DIPwHWnxjOSynuxi/n
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Deletes itself
-
Loads dropped DLL
-