Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1fbf2dbee1cc89d2281e5c80d0ee1695_JaffaCakes118
-
Size
762KB
-
Sample
240507-g86vgada4x
-
MD5
1fbf2dbee1cc89d2281e5c80d0ee1695
-
SHA1
475328b85303df68ff1ec614e7830bcb4b1cecf9
-
SHA256
4ef2cf76837976d50710e7e011e785505a3004e481696ebb6e0ff0c27e9079ba
-
SHA512
6a6d39443189b6c7b826240845404602926a39f78100c27824b9072e677f0a78a2e555744b71767f5319f00d41caecccadf7166478052e8b6d182ff5ab3f8776
-
SSDEEP
12288:/tobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTn9:/tDltItNW7pjDlpt5XY/2TkXKza/29x
Static task
static1
Behavioral task
behavioral1
Sample
1fbf2dbee1cc89d2281e5c80d0ee1695_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1fbf2dbee1cc89d2281e5c80d0ee1695_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$_3_.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$_3_.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
1fbf2dbee1cc89d2281e5c80d0ee1695_JaffaCakes118
-
Size
762KB
-
MD5
1fbf2dbee1cc89d2281e5c80d0ee1695
-
SHA1
475328b85303df68ff1ec614e7830bcb4b1cecf9
-
SHA256
4ef2cf76837976d50710e7e011e785505a3004e481696ebb6e0ff0c27e9079ba
-
SHA512
6a6d39443189b6c7b826240845404602926a39f78100c27824b9072e677f0a78a2e555744b71767f5319f00d41caecccadf7166478052e8b6d182ff5ab3f8776
-
SSDEEP
12288:/tobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTn9:/tDltItNW7pjDlpt5XY/2TkXKza/29x
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
$_3_
-
Size
1.7MB
-
MD5
d4c16982f8a834bc0f8028b45c3ae543
-
SHA1
9d9cec9af8f23a23521e20d48d9af1024663a4a7
-
SHA256
932badf8ce27381bd595c9d861d7f7142fe98f233a893a2003a5f5e5ec163b3b
-
SHA512
c94b8d978afac107c08a5405cf9510e48d4bcf1284292eee1d08898f1c7a43a83a9655dc4d85d27d3b825e45a8f136c7beb71405fab94bb5e2437b7c4ad44b5c
-
SSDEEP
49152:n7mrmYPoEHVGTWFkO4ITVpSuEqM/vrM3rA3SuN5:km2Z12WFYFVf
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-