Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118
-
Size
497KB
-
Sample
240614-kysfwaxdnj
-
MD5
a8db020bc02e6fbcaac5aeb301cdc38e
-
SHA1
db5088a363771d518572fdf0e9b4c62f70314251
-
SHA256
1816a9023320b892c54fc1abdc4ba3177ae9ecee4f145efa71d290b357eb1061
-
SHA512
50eb95130a192ef4c622007cf6075bbbdcddd80b81298136c9f1ccaecf7e2b8f71474e3d2a5de178e81b9a76a54edb1d65a7951992db4c240590f50ed88e7a9b
-
SSDEEP
384:WRWRQ2wCLNka39k5/8xd9f3K2qIVT4CzztUakZN7llfR:lRMo39k5kxvf3K2LVrtUnR
Static task
static1
Behavioral task
behavioral1
Sample
a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118.vbs
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118
-
Size
497KB
-
MD5
a8db020bc02e6fbcaac5aeb301cdc38e
-
SHA1
db5088a363771d518572fdf0e9b4c62f70314251
-
SHA256
1816a9023320b892c54fc1abdc4ba3177ae9ecee4f145efa71d290b357eb1061
-
SHA512
50eb95130a192ef4c622007cf6075bbbdcddd80b81298136c9f1ccaecf7e2b8f71474e3d2a5de178e81b9a76a54edb1d65a7951992db4c240590f50ed88e7a9b
-
SSDEEP
384:WRWRQ2wCLNka39k5/8xd9f3K2qIVT4CzztUakZN7llfR:lRMo39k5kxvf3K2LVrtUnR
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-