Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
21/04/2024, 17:37
General
-
Target
ffceaff232f2e205e1dbba7197a28a9a_JaffaCakes118.exe
-
Size
279KB
-
MD5
ffceaff232f2e205e1dbba7197a28a9a
-
SHA1
f803f4e45d7762b5b383792eeb8f0246ba136a6a
-
SHA256
4eab6e8b3e7bf91ab9d323935715298a04def2f07bc0209d0b2b95fef220fb21
-
SHA512
35bad1e25e4dabb8d062330ed7ffb649eff15f9244e1f0044c81369f79c318d34ad24ea25b18b97f118b2782acf97d2f491ef5587458855a4990ceea43ff584c
-
SSDEEP
6144:WCIaFPby7cvOOK9qGGxhFCJiS+4TKfBECyVMzcc0g:75by7cv89qGGbM4x4TKfBECoB
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ffceaff232f2e205e1dbba7197a28a9a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ffceaff232f2e205e1dbba7197a28a9a_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
188KB
-
Filesize
39.3MB
-
Filesize
39.3MB
-
Filesize
1024KB