Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3bb0e654c8f3ee6b3a8ac8ae568e0329_JaffaCakes118
-
Size
88KB
-
Sample
240512-x398pscd5w
-
MD5
3bb0e654c8f3ee6b3a8ac8ae568e0329
-
SHA1
ffb12a9320a65544773932697bb65a72ebfb3f4e
-
SHA256
84674f63d16dbfb072358f211b58568d8173fa584c93e999e2eb86d559995f74
-
SHA512
1a970878d6e2437e9fa3a1190c497fdfb28530a0ba0464b7fa47172d5a6f64caeea6787786da2aa2b880532fc4062ecef50b9f67eabc21948fd334c2f6e0b88e
-
SSDEEP
1536:h93buBYqTAZmDNrIDza+GyE1xA8m+hGf/UIyIO3tJgTvwEKQkzmD:j3W7DpIDzVmXA7OdJxEKsD
Behavioral task
behavioral1
Sample
3bb0e654c8f3ee6b3a8ac8ae568e0329_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
pony
http://www.tcoolonline.mobi/wp-includes/ID3/Panel/gate.php
Targets
-
-
Target
3bb0e654c8f3ee6b3a8ac8ae568e0329_JaffaCakes118
-
Size
88KB
-
MD5
3bb0e654c8f3ee6b3a8ac8ae568e0329
-
SHA1
ffb12a9320a65544773932697bb65a72ebfb3f4e
-
SHA256
84674f63d16dbfb072358f211b58568d8173fa584c93e999e2eb86d559995f74
-
SHA512
1a970878d6e2437e9fa3a1190c497fdfb28530a0ba0464b7fa47172d5a6f64caeea6787786da2aa2b880532fc4062ecef50b9f67eabc21948fd334c2f6e0b88e
-
SSDEEP
1536:h93buBYqTAZmDNrIDza+GyE1xA8m+hGf/UIyIO3tJgTvwEKQkzmD:j3W7DpIDzVmXA7OdJxEKsD
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-