Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ed590695c86d36428567cf0a5ba082cf_JaffaCakes118
-
Size
300KB
-
Sample
240411-nycxzaah67
-
MD5
ed590695c86d36428567cf0a5ba082cf
-
SHA1
439258cf1ccae0fb622bb8a67fd75a85afe43e76
-
SHA256
5bb615a671d9fd3f0e32526f18c402394134c8c4ec0c4a79fcd422b6f43943c5
-
SHA512
813a55e71e59a0d8c1a703887030dd38e281a652bb0871096618021f531058a85aa3b9c23e1437503fbe82271978bd7769d0afcc30061511bf36860b33e2a44a
-
SSDEEP
3072:khEPZz2c1VzH9ZtyYjBCwD+afFICNcFOnQYPDY0rlGY4aDACauXHt7kMMor5cu:WEPZz
Static task
static1
Behavioral task
behavioral1
Sample
ed590695c86d36428567cf0a5ba082cf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ed590695c86d36428567cf0a5ba082cf_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ed590695c86d36428567cf0a5ba082cf_JaffaCakes118
-
Size
300KB
-
MD5
ed590695c86d36428567cf0a5ba082cf
-
SHA1
439258cf1ccae0fb622bb8a67fd75a85afe43e76
-
SHA256
5bb615a671d9fd3f0e32526f18c402394134c8c4ec0c4a79fcd422b6f43943c5
-
SHA512
813a55e71e59a0d8c1a703887030dd38e281a652bb0871096618021f531058a85aa3b9c23e1437503fbe82271978bd7769d0afcc30061511bf36860b33e2a44a
-
SSDEEP
3072:khEPZz2c1VzH9ZtyYjBCwD+afFICNcFOnQYPDY0rlGY4aDACauXHt7kMMor5cu:WEPZz
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-