Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9a2c97539bf1eeadd6dc80a37d4f7e69_JaffaCakes118
-
Size
376KB
-
Sample
240606-hhqagabf66
-
MD5
9a2c97539bf1eeadd6dc80a37d4f7e69
-
SHA1
a09de9f9ff3735b305d2b3fe3aae69727b02a1c0
-
SHA256
6c1798d875cc088bb42859f1eb8ed15220ec07e1e45658083f65bd466bd65ca9
-
SHA512
8f6b15065d6ef7f7f3af46a54a0f0c1eb4276a37e862ad5e6f8250407e1d6a2a355bfb787c37afeed0baaeca01138bd5e1f9ba9bae13e4a930dff6f53a5f8227
-
SSDEEP
6144:tFqTpMmb37r+TiZNAqMRQzRZZxKxMFihFAziYQuLNMEC:t0NDmoNAF0RZZxKGIFAziYQuLN
Static task
static1
Behavioral task
behavioral1
Sample
9a2c97539bf1eeadd6dc80a37d4f7e69_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
gozi
-
build
214062
Extracted
gozi
3193
fy76qn.email
dst1894.com
w40shailie.city
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
9a2c97539bf1eeadd6dc80a37d4f7e69_JaffaCakes118
-
Size
376KB
-
MD5
9a2c97539bf1eeadd6dc80a37d4f7e69
-
SHA1
a09de9f9ff3735b305d2b3fe3aae69727b02a1c0
-
SHA256
6c1798d875cc088bb42859f1eb8ed15220ec07e1e45658083f65bd466bd65ca9
-
SHA512
8f6b15065d6ef7f7f3af46a54a0f0c1eb4276a37e862ad5e6f8250407e1d6a2a355bfb787c37afeed0baaeca01138bd5e1f9ba9bae13e4a930dff6f53a5f8227
-
SSDEEP
6144:tFqTpMmb37r+TiZNAqMRQzRZZxKxMFihFAziYQuLNMEC:t0NDmoNAF0RZZxKGIFAziYQuLN
-