Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b4c463403e28d202d08d418caead6491_JaffaCakes118
-
Size
762KB
-
Sample
240616-xy2e1axenl
-
MD5
b4c463403e28d202d08d418caead6491
-
SHA1
d5827a9d8081d7ebd908241d95a456192121a729
-
SHA256
4cd5e9da03cf453504bd3d4f48dd4263b27176d9fd1c66492d69ac8547ac254b
-
SHA512
68c0887aaadb9fb987dc16a9aa50cfda70611978f67ea8fe21e1e4dd14557416d74bf3420f422990f66f7d1db084beb96b5f467eb2f19d9416ec9149401a1268
-
SSDEEP
12288:YtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnA:YtDltItNW7pjDlpt5XY/2TkXKza/298
Static task
static1
Behavioral task
behavioral1
Sample
b4c463403e28d202d08d418caead6491_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b4c463403e28d202d08d418caead6491_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$_3_.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$_3_.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
b4c463403e28d202d08d418caead6491_JaffaCakes118
-
Size
762KB
-
MD5
b4c463403e28d202d08d418caead6491
-
SHA1
d5827a9d8081d7ebd908241d95a456192121a729
-
SHA256
4cd5e9da03cf453504bd3d4f48dd4263b27176d9fd1c66492d69ac8547ac254b
-
SHA512
68c0887aaadb9fb987dc16a9aa50cfda70611978f67ea8fe21e1e4dd14557416d74bf3420f422990f66f7d1db084beb96b5f467eb2f19d9416ec9149401a1268
-
SSDEEP
12288:YtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnA:YtDltItNW7pjDlpt5XY/2TkXKza/298
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
$_3_
-
Size
1.7MB
-
MD5
d4c16982f8a834bc0f8028b45c3ae543
-
SHA1
9d9cec9af8f23a23521e20d48d9af1024663a4a7
-
SHA256
932badf8ce27381bd595c9d861d7f7142fe98f233a893a2003a5f5e5ec163b3b
-
SHA512
c94b8d978afac107c08a5405cf9510e48d4bcf1284292eee1d08898f1c7a43a83a9655dc4d85d27d3b825e45a8f136c7beb71405fab94bb5e2437b7c4ad44b5c
-
SSDEEP
49152:n7mrmYPoEHVGTWFkO4ITVpSuEqM/vrM3rA3SuN5:km2Z12WFYFVf
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-