Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bd4b1ccafd3ffcca49961c010d8abed5_JaffaCakes118
-
Size
47KB
-
Sample
240619-t4bjzsybkr
-
MD5
bd4b1ccafd3ffcca49961c010d8abed5
-
SHA1
e49c6d2c4e77e782f8f6afcfa1a34fedb6b67586
-
SHA256
d58f219e40a169eb0bd5338740f1852d690630466b77cd343772f4da12271fd9
-
SHA512
842d9bccac08d44bca271230a655f351e15425bb64bc925d8ddc8bf418b2586258cef50c1d54c1de1930b4d435821b752134ecb6ebb9a999b8acdec238f27b4f
-
SSDEEP
768:LWu7Rgdz+OQFQvUGB6T8PEKi6JNf79sdgVR9aPzdADDrDyhss92vxboECSB0RDYp:JAqTA9naPz2vxboECSBMzK2uae
Static task
static1
Behavioral task
behavioral1
Sample
bd4b1ccafd3ffcca49961c010d8abed5_JaffaCakes118.vbs
Resource
win7-20231129-en
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:1177
65a67df4f491be9b9a2a9164c0652865
-
reg_key
65a67df4f491be9b9a2a9164c0652865
-
splitter
|'|'|
Targets
-
-
Target
bd4b1ccafd3ffcca49961c010d8abed5_JaffaCakes118
-
Size
47KB
-
MD5
bd4b1ccafd3ffcca49961c010d8abed5
-
SHA1
e49c6d2c4e77e782f8f6afcfa1a34fedb6b67586
-
SHA256
d58f219e40a169eb0bd5338740f1852d690630466b77cd343772f4da12271fd9
-
SHA512
842d9bccac08d44bca271230a655f351e15425bb64bc925d8ddc8bf418b2586258cef50c1d54c1de1930b4d435821b752134ecb6ebb9a999b8acdec238f27b4f
-
SSDEEP
768:LWu7Rgdz+OQFQvUGB6T8PEKi6JNf79sdgVR9aPzdADDrDyhss92vxboECSB0RDYp:JAqTA9naPz2vxboECSBMzK2uae
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-