Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
44402e4c1eae240af838d20a0d3ea9ad_JaffaCakes118
-
Size
857KB
-
Sample
240515-ddj6fadh31
-
MD5
44402e4c1eae240af838d20a0d3ea9ad
-
SHA1
034fb753bcedae4fe26e687edd276cf742b6c4b1
-
SHA256
828358acc419bb41e883bd4c93e5f2c2b2fee2258d7f21355994f57e3724bd55
-
SHA512
e755297391e6f1988a72b9152d1db96d938380b28f68ff0a4716e1418a59cb7c03c5b12d42349466cae5d340ba24050dafe135ffb468c11f42c219024f80ccaf
-
SSDEEP
24576:ZSjlqUrNpwElYn6Pz77hj/653HwwWkoipDaR+3MjcKZ:ZSjlqU7wElYnqz3hjSV5WkZDn3Mjc
Static task
static1
Behavioral task
behavioral1
Sample
44402e4c1eae240af838d20a0d3ea9ad_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
44402e4c1eae240af838d20a0d3ea9ad_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
44402e4c1eae240af838d20a0d3ea9ad_JaffaCakes118
-
Size
857KB
-
MD5
44402e4c1eae240af838d20a0d3ea9ad
-
SHA1
034fb753bcedae4fe26e687edd276cf742b6c4b1
-
SHA256
828358acc419bb41e883bd4c93e5f2c2b2fee2258d7f21355994f57e3724bd55
-
SHA512
e755297391e6f1988a72b9152d1db96d938380b28f68ff0a4716e1418a59cb7c03c5b12d42349466cae5d340ba24050dafe135ffb468c11f42c219024f80ccaf
-
SSDEEP
24576:ZSjlqUrNpwElYn6Pz77hj/653HwwWkoipDaR+3MjcKZ:ZSjlqU7wElYnqz3hjSV5WkZDn3Mjc
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-