Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
834300d014ae6e65201ce04d091219fc_JaffaCakes118
-
Size
1.3MB
-
Sample
240530-gybataaa93
-
MD5
834300d014ae6e65201ce04d091219fc
-
SHA1
56af653938b12a12c4185ed71f221812c3fb4590
-
SHA256
7eb32bdb92a9768dfc8f30f22365aaac0d57931a77bffd71eb928f72dcdeab1e
-
SHA512
d8fa6271651ffa904e53f178a0d11907652169612ae7fea31207317de8901bdde153e7b13eeb40b7c7280c52df4d6cad23bc10d2735c74908482713a87997d58
-
SSDEEP
24576:BhNH39BauJj6+QY2rTG0F1X1xBblqQ3loqjXtYXFyPV3GrugU8CMl7BR:LBDl8RhrTFF1FxtloMXtsyD8xBR
Static task
static1
Behavioral task
behavioral1
Sample
834300d014ae6e65201ce04d091219fc_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
834300d014ae6e65201ce04d091219fc_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
lokibot
http://23.95.132.48/~main/.isuoxiso/w.php/2sN0gEZTW0LpL
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
834300d014ae6e65201ce04d091219fc_JaffaCakes118
-
Size
1.3MB
-
MD5
834300d014ae6e65201ce04d091219fc
-
SHA1
56af653938b12a12c4185ed71f221812c3fb4590
-
SHA256
7eb32bdb92a9768dfc8f30f22365aaac0d57931a77bffd71eb928f72dcdeab1e
-
SHA512
d8fa6271651ffa904e53f178a0d11907652169612ae7fea31207317de8901bdde153e7b13eeb40b7c7280c52df4d6cad23bc10d2735c74908482713a87997d58
-
SSDEEP
24576:BhNH39BauJj6+QY2rTG0F1X1xBblqQ3loqjXtYXFyPV3GrugU8CMl7BR:LBDl8RhrTFF1FxtloMXtsyD8xBR
Score10/10-
Accesses Microsoft Outlook profiles
-