Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fdf4e622184cc9cf5528d450c72cf0e5_JaffaCakes118
-
Size
98KB
-
Sample
240421-aah77adh41
-
MD5
fdf4e622184cc9cf5528d450c72cf0e5
-
SHA1
44b0eb90bb73da28e486654b01b8966718ebd8df
-
SHA256
5d53983b22ced76ff56dd83a6b0799750d5f5069ac7e83ab4562214f4968905c
-
SHA512
8ee4c261183bebdfd22839cd2a0d925b6f7b6cba7e2a5278a66bbb9b38278a291c6939a42a892ee816ad6e24bbbbc6120201cc9b33e15ef87f0f3dd7f838f656
-
SSDEEP
3072:i47excGxFLPkH9SnbZDaKag1F0JYEZtpAhf:i+eGYtPk0Z+Q1+ahf
Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-DEVOCHKA.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PHOTO-DEVOCHKA.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
PHOTO-DEVOCHKA.exe
-
Size
149KB
-
MD5
13135ec7bee7db877b3654059374ebde
-
SHA1
f3f3a8c6b395211ebdbb2a73769e21c401d34e0c
-
SHA256
7dbe9bdea098a5cb0608135c1705d2aa2e080ebc4146a02001a793ff0970252a
-
SHA512
3f7eb418322b1abbe60b2fa6845ffb3e530808739b0dc542707c713f83bc4b02a4a1568a28e9badeb71bd5512e14a47387abe80b2edf0b440f2c40cc3cc08db8
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiqtAhp:AbXE9OiTGfhEClq9QtAhp
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-