Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
108156ae3609706003c6cefd6335c554_JaffaCakes118
-
Size
368KB
-
Sample
240503-pjadzagc36
-
MD5
108156ae3609706003c6cefd6335c554
-
SHA1
9ad9e65ee4407162beb14eb33859ffc77451e7fb
-
SHA256
535d92c4a194c64723fdf9b7279f033085c0861d93b9f43747320759fd172afc
-
SHA512
72ec03a163d291c9fc8e73689e63e0b55aa78d2c97e83b2187d581592d09a7ab361004ce72ee9a8792dee6c36a4a6ffda80391106afc2a1e7733653f813b247f
-
SSDEEP
3072:aFFyrH+tfkhzjvRYkYjvnNfugsIN23+q7cuZv2kjgyoWOuClDfujpITpVxzApTld:aiHGIRYtvZughqLFeuwi0pVaY
Static task
static1
Behavioral task
behavioral1
Sample
108156ae3609706003c6cefd6335c554_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
3.9
jc
petfashionvalley.com
sisermexico.com
mycityneighbors.com
trojanerhilfe.com
2012mi.com
bitcoinkeith.com
integracube.com
portalgnu.com
xingcaiyule2.com
saasgroceries.com
groupulljimzasac.com
sscfz.win
microauditoria.com
grandijen.com
beautiebootik.com
trb899.com
autobittrex.com
greeksinbritain.com
flamingouno.com
agencecuivre.com
speedhisevents.com
xn--w9qx64m.com
thomasartservices.com
bistrotdesbornes.com
moneyisnear.com
sendai-baikyaku.com
tongzhoudianlan.com
rhythaim.com
wisconsinhempinsurance.com
bestecommerce.services
tailfinner.com
diamondjdoodles.com
zhangzi365.com
meggrayx.com
juicus.info
ringastore.com
themcnab.net
kateakulenko.com
gogoaonline.com
riversidebic.com
lowkingz.com
hyraxindustries.com
go2cab.net
mouthsmisk.com
irs-online.net
lufkistefan.com
indonesianherbalmedicine.com
xatbike.com
smedcjogja.com
rongs-medical.com
jolyfers.com
harrykettle.net
tatadesign.com
dropbauw.com
constructoraerikanavarro.com
scshqjx.com
lockoutautohailrepair.com
justmodstyles.com
inherentvariables.com
desenvolvimentopessoal.net
aceadvisorybpo.com
garagetribe.com
topicclusters.com
organizacionyorden.com
podwath.com
Targets
-
-
Target
108156ae3609706003c6cefd6335c554_JaffaCakes118
-
Size
368KB
-
MD5
108156ae3609706003c6cefd6335c554
-
SHA1
9ad9e65ee4407162beb14eb33859ffc77451e7fb
-
SHA256
535d92c4a194c64723fdf9b7279f033085c0861d93b9f43747320759fd172afc
-
SHA512
72ec03a163d291c9fc8e73689e63e0b55aa78d2c97e83b2187d581592d09a7ab361004ce72ee9a8792dee6c36a4a6ffda80391106afc2a1e7733653f813b247f
-
SSDEEP
3072:aFFyrH+tfkhzjvRYkYjvnNfugsIN23+q7cuZv2kjgyoWOuClDfujpITpVxzApTld:aiHGIRYtvZughqLFeuwi0pVaY
-
Formbook payload
-
Suspicious use of SetThreadContext
-