Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118
-
Size
1000KB
-
Sample
240411-fj37lsga2z
-
MD5
ecb5a5787b35f0685de4d3015448d1c7
-
SHA1
ff76972807ca531e046999a351aff7407fbd6db7
-
SHA256
5541ea53bef94562eced11c2f12d65cc346df5c0ff144487414f9878bca54041
-
SHA512
02a8676b66123b82cacf40bc8eb2e43bb050923548cc42cb89370b8052489d5f0c757c57842a477a35a49960b78bd26dd55924149a7824f8c3b85dc29ced5c2b
-
SSDEEP
24576:I7/m2RlQVD5QKLvX4/1B+5vMiqt0gj2ed:oAVDTvIfqOL
Static task
static1
Behavioral task
behavioral1
Sample
ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118
-
Size
1000KB
-
MD5
ecb5a5787b35f0685de4d3015448d1c7
-
SHA1
ff76972807ca531e046999a351aff7407fbd6db7
-
SHA256
5541ea53bef94562eced11c2f12d65cc346df5c0ff144487414f9878bca54041
-
SHA512
02a8676b66123b82cacf40bc8eb2e43bb050923548cc42cb89370b8052489d5f0c757c57842a477a35a49960b78bd26dd55924149a7824f8c3b85dc29ced5c2b
-
SSDEEP
24576:I7/m2RlQVD5QKLvX4/1B+5vMiqt0gj2ed:oAVDTvIfqOL
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-