Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
06393c08557a83d13a6b9bc2f34030d1_JaffaCakes118
-
Size
1.8MB
-
Sample
240428-2jz1vaah63
-
MD5
06393c08557a83d13a6b9bc2f34030d1
-
SHA1
115abec09c319c6541f19fd324c6c1f5e4066683
-
SHA256
6d3e501fdb875b9a4a8bf1b4258989a0ebe5717ad265546686a05cf53e0fb80a
-
SHA512
cf773d7080e56e1c6bc1d7b55ef551e766fbb524788fb8f1dc7e4a5afb57741098d8e9d6e08926ee9784deb0a1e7c94733c325f4dfbc6f7ab3f822c8cdcf2a21
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl6S:NABO
Behavioral task
behavioral1
Sample
06393c08557a83d13a6b9bc2f34030d1_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
06393c08557a83d13a6b9bc2f34030d1_JaffaCakes118
-
Size
1.8MB
-
MD5
06393c08557a83d13a6b9bc2f34030d1
-
SHA1
115abec09c319c6541f19fd324c6c1f5e4066683
-
SHA256
6d3e501fdb875b9a4a8bf1b4258989a0ebe5717ad265546686a05cf53e0fb80a
-
SHA512
cf773d7080e56e1c6bc1d7b55ef551e766fbb524788fb8f1dc7e4a5afb57741098d8e9d6e08926ee9784deb0a1e7c94733c325f4dfbc6f7ab3f822c8cdcf2a21
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl6S:NABO
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-