Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2b55fd8225bbb246505b3977b3f9a771_JaffaCakes118
-
Size
87KB
-
Sample
240509-w9evpsbg94
-
MD5
2b55fd8225bbb246505b3977b3f9a771
-
SHA1
69011ee374a24aaf95d295dfcc1caf7e40134116
-
SHA256
c5062955b084ce13e9c6dcf285f4d664554b3f71de1e35af8238d2f717bb8863
-
SHA512
465d673ffba4ed16b4d1d64eba50ef2b4ddb7d27c8d0aece9f8a61b2b8dc166e26f31d741b84c18fac9f327a7d5190e37d0c6d10571d5fe285321ec77bae467f
-
SSDEEP
1536:07ljmW9/bvF8kDK3cvyQa2E1XFjmCaIH84G+a9:Wl/bvF8OnaJ1XtxaIH84
Behavioral task
behavioral1
Sample
2b55fd8225bbb246505b3977b3f9a771_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b55fd8225bbb246505b3977b3f9a771_JaffaCakes118.doc
Resource
win10v2004-20240426-en
Malware Config
Extracted
http://www.ozturcanakkale.com/veh
http://jalvarshaborewell.com/qKkg
http://kikakeus.nl/dgc0WYq9
http://pashkinbar.ru/cWGU
http://cisteni-studni.com/qb1Y2
Targets
-
-
Target
2b55fd8225bbb246505b3977b3f9a771_JaffaCakes118
-
Size
87KB
-
MD5
2b55fd8225bbb246505b3977b3f9a771
-
SHA1
69011ee374a24aaf95d295dfcc1caf7e40134116
-
SHA256
c5062955b084ce13e9c6dcf285f4d664554b3f71de1e35af8238d2f717bb8863
-
SHA512
465d673ffba4ed16b4d1d64eba50ef2b4ddb7d27c8d0aece9f8a61b2b8dc166e26f31d741b84c18fac9f327a7d5190e37d0c6d10571d5fe285321ec77bae467f
-
SSDEEP
1536:07ljmW9/bvF8kDK3cvyQa2E1XFjmCaIH84G+a9:Wl/bvF8OnaJ1XtxaIH84
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-