Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118
-
Size
175KB
-
Sample
240528-mkr93agg65
-
MD5
7ca4228dd9cc14b1b5d9938c6ed1b144
-
SHA1
fb014a7813256c848e97007a7705f355bcf40576
-
SHA256
009081468aa09b402378444010fd772036dbefb92c839179c69cdbcb23133a33
-
SHA512
4624c77c3fc301538d33d6f25ceebbbd7cebf1c17bd0c59b7fb36913fcd32c5f9f9447f96f1ac01f4af60f6e9e951d03df22594a342e9aae62be41d9e12a67e9
-
SSDEEP
1536:trdi1Ir77zOH98Wj2gpngx+a9zGmLtHrj:trfrzOH98ipgfFrj
Behavioral task
behavioral1
Sample
7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118.doc
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118.doc
Resource
win10v2004-20240226-en
Malware Config
Extracted
https://haikouweixun.com/jn5/Rbp/
http://carolinacanullo.com/js/hllPT/
http://megasolucoesti.com/R9KDq0O8w/B3KqPpe/
http://www.insulution.org/wp-admin/swift/swift/y318LGM/
http://petafilm.com/calendar/6kOpwrt/
https://dev.contractdevs.co.uk/hbbny/Kv9/
http://blog.penmman.com/wp-content/uploads/1ECbn9K/
Targets
-
-
Target
7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118
-
Size
175KB
-
MD5
7ca4228dd9cc14b1b5d9938c6ed1b144
-
SHA1
fb014a7813256c848e97007a7705f355bcf40576
-
SHA256
009081468aa09b402378444010fd772036dbefb92c839179c69cdbcb23133a33
-
SHA512
4624c77c3fc301538d33d6f25ceebbbd7cebf1c17bd0c59b7fb36913fcd32c5f9f9447f96f1ac01f4af60f6e9e951d03df22594a342e9aae62be41d9e12a67e9
-
SSDEEP
1536:trdi1Ir77zOH98Wj2gpngx+a9zGmLtHrj:trfrzOH98ipgfFrj
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Drops file in System32 directory
-