Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0f2fc8d4d7f2ade7ff94e2ba62606222_JaffaCakes118
-
Size
2.2MB
-
Sample
240502-3wxxpahg21
-
MD5
0f2fc8d4d7f2ade7ff94e2ba62606222
-
SHA1
cfed352c978be66668c44bd4bce22d927e6f2998
-
SHA256
0cf96916a10e2b797571d9ef1c1acd76b04f2935225ce5fd97f8ba50e31b36a1
-
SHA512
c045b66e98830ae75534c937d3fef256a312f6d3225168015d6ea1a86db42616b73dfe7ea235273db3fc35c58fb603f9f1f29f0242eac4a9920d90efb620f98e
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfg:NABt
Behavioral task
behavioral1
Sample
0f2fc8d4d7f2ade7ff94e2ba62606222_JaffaCakes118.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
0f2fc8d4d7f2ade7ff94e2ba62606222_JaffaCakes118
-
Size
2.2MB
-
MD5
0f2fc8d4d7f2ade7ff94e2ba62606222
-
SHA1
cfed352c978be66668c44bd4bce22d927e6f2998
-
SHA256
0cf96916a10e2b797571d9ef1c1acd76b04f2935225ce5fd97f8ba50e31b36a1
-
SHA512
c045b66e98830ae75534c937d3fef256a312f6d3225168015d6ea1a86db42616b73dfe7ea235273db3fc35c58fb603f9f1f29f0242eac4a9920d90efb620f98e
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfg:NABt
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-