Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
edb455a40e665a1f3d71204aa70494c8_JaffaCakes118
-
Size
385KB
-
Sample
240411-sfzq8shb4z
-
MD5
edb455a40e665a1f3d71204aa70494c8
-
SHA1
02ce06232319e0b85a1e40b3633c17f90a300778
-
SHA256
435ae4c3a205945905dadeef5889596805f9c7841389a66e28ec10b4e71c7ec1
-
SHA512
c6bce4d1eb9a1a33f040d3f59ce7eb11828fd80bfffd10bb2e8c3987ae802ebec7c941e247759ff5f7e8a47125325c0c6417d5a85f63a9f1624497b996a4748e
-
SSDEEP
6144:OslY0Y5WLLPg6IJ+PycfSHzfMOPTkR0B1K4BUuqoCVqMT7k+bKOCRx3R/B:s0pLLhI069wR0Bw4GuqoCQMT71L+xh/B
Static task
static1
Behavioral task
behavioral1
Sample
edb455a40e665a1f3d71204aa70494c8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edb455a40e665a1f3d71204aa70494c8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
edb455a40e665a1f3d71204aa70494c8_JaffaCakes118
-
Size
385KB
-
MD5
edb455a40e665a1f3d71204aa70494c8
-
SHA1
02ce06232319e0b85a1e40b3633c17f90a300778
-
SHA256
435ae4c3a205945905dadeef5889596805f9c7841389a66e28ec10b4e71c7ec1
-
SHA512
c6bce4d1eb9a1a33f040d3f59ce7eb11828fd80bfffd10bb2e8c3987ae802ebec7c941e247759ff5f7e8a47125325c0c6417d5a85f63a9f1624497b996a4748e
-
SSDEEP
6144:OslY0Y5WLLPg6IJ+PycfSHzfMOPTkR0B1K4BUuqoCVqMT7k+bKOCRx3R/B:s0pLLhI069wR0Bw4GuqoCQMT71L+xh/B
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-