Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff4ee1fcd30340236715b83c3bf8db5d_JaffaCakes118
-
Size
390KB
-
Sample
240421-pz9trsbg65
-
MD5
ff4ee1fcd30340236715b83c3bf8db5d
-
SHA1
a4f8d3f3f6a934560cf9008d0171d020da775965
-
SHA256
1ad3d657fed89e26d6f54e2d67e95796c096deb76fd2f09972ac63ff9704891f
-
SHA512
cd400ad4025ffaa37114069152f253d8e775fe053df8beb69e1a7896171fbc56e3c0966130e78a2916cd3105cb1edff0b7551ae91e7f2a2660ee140408e1da9b
-
SSDEEP
6144:gP3Lu3x6Yg/q1AYF6EvRbADym7zsMc6hJr0GXXdaP5+5LRPsUDu4RSflDwUfplMu:gPbmxiq1AYF6E62VBElkuNgfZLMen
Static task
static1
Behavioral task
behavioral1
Sample
ff4ee1fcd30340236715b83c3bf8db5d_JaffaCakes118.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff4ee1fcd30340236715b83c3bf8db5d_JaffaCakes118.js
Resource
win10v2004-20240412-en
Malware Config
Extracted
https://erzurum.us/65376345273497600381/tjTyjrjywrdmJoaaenvF/dll/assistant.php
Targets
-
-
Target
ff4ee1fcd30340236715b83c3bf8db5d_JaffaCakes118
-
Size
390KB
-
MD5
ff4ee1fcd30340236715b83c3bf8db5d
-
SHA1
a4f8d3f3f6a934560cf9008d0171d020da775965
-
SHA256
1ad3d657fed89e26d6f54e2d67e95796c096deb76fd2f09972ac63ff9704891f
-
SHA512
cd400ad4025ffaa37114069152f253d8e775fe053df8beb69e1a7896171fbc56e3c0966130e78a2916cd3105cb1edff0b7551ae91e7f2a2660ee140408e1da9b
-
SSDEEP
6144:gP3Lu3x6Yg/q1AYF6EvRbADym7zsMc6hJr0GXXdaP5+5LRPsUDu4RSflDwUfplMu:gPbmxiq1AYF6E62VBElkuNgfZLMen
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-