Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fa5f8bef489cf87404077b8437f700fa_JaffaCakes118
-
Size
762KB
-
Sample
240419-qhzg5sec8t
-
MD5
fa5f8bef489cf87404077b8437f700fa
-
SHA1
a5412255ebc637165e2d7528dfc56350324769cb
-
SHA256
b4ae582fb61848d83e1e55dcc4925ea7788dba0c940c5a21157de6566342f06a
-
SHA512
90f4ce55fab0369d3d5b43888d6ddf2c0f00408dcfe52476b045510fbd0f12400170b0260611086e826464a17d9fbe06679e0a47203af62152f13191feaff0a3
-
SSDEEP
12288:qtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnR:qtDltItNW7pjDlpt5XY/2TkXKza/29V
Static task
static1
Behavioral task
behavioral1
Sample
fa5f8bef489cf87404077b8437f700fa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa5f8bef489cf87404077b8437f700fa_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$_3_.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$_3_.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fa5f8bef489cf87404077b8437f700fa_JaffaCakes118
-
Size
762KB
-
MD5
fa5f8bef489cf87404077b8437f700fa
-
SHA1
a5412255ebc637165e2d7528dfc56350324769cb
-
SHA256
b4ae582fb61848d83e1e55dcc4925ea7788dba0c940c5a21157de6566342f06a
-
SHA512
90f4ce55fab0369d3d5b43888d6ddf2c0f00408dcfe52476b045510fbd0f12400170b0260611086e826464a17d9fbe06679e0a47203af62152f13191feaff0a3
-
SSDEEP
12288:qtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnR:qtDltItNW7pjDlpt5XY/2TkXKza/29V
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
$_3_
-
Size
1.7MB
-
MD5
d4c16982f8a834bc0f8028b45c3ae543
-
SHA1
9d9cec9af8f23a23521e20d48d9af1024663a4a7
-
SHA256
932badf8ce27381bd595c9d861d7f7142fe98f233a893a2003a5f5e5ec163b3b
-
SHA512
c94b8d978afac107c08a5405cf9510e48d4bcf1284292eee1d08898f1c7a43a83a9655dc4d85d27d3b825e45a8f136c7beb71405fab94bb5e2437b7c4ad44b5c
-
SSDEEP
49152:n7mrmYPoEHVGTWFkO4ITVpSuEqM/vrM3rA3SuN5:km2Z12WFYFVf
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-