Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0513f4c75d0b8995b43d9269871729d6_JaffaCakes118
-
Size
682KB
-
Sample
240620-mbebvasbqh
-
MD5
0513f4c75d0b8995b43d9269871729d6
-
SHA1
48e7cfc438ddb6435711001d35d95b811a2fd29b
-
SHA256
c645dfd4da3d19c3d79c4a6e906ab1c8c7725e685f4c8c9e2b85415d76d6d05f
-
SHA512
159f101e7872443ca23dc058b62a93d0a0c73cd6be1f4426d46d4cc73a1e21f58c9be8204367a7e3f400e9508c7bf2f526be9cbcbdcd4af0851336465082d0e0
-
SSDEEP
12288:usNs2TLK/fRaWvemjcdFa2XbR5ORDB25Nm/u+FTHEK:n2eOfRal/naIGxBEmG+FTX
Behavioral task
behavioral1
Sample
0513f4c75d0b8995b43d9269871729d6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0513f4c75d0b8995b43d9269871729d6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0513f4c75d0b8995b43d9269871729d6_JaffaCakes118
-
Size
682KB
-
MD5
0513f4c75d0b8995b43d9269871729d6
-
SHA1
48e7cfc438ddb6435711001d35d95b811a2fd29b
-
SHA256
c645dfd4da3d19c3d79c4a6e906ab1c8c7725e685f4c8c9e2b85415d76d6d05f
-
SHA512
159f101e7872443ca23dc058b62a93d0a0c73cd6be1f4426d46d4cc73a1e21f58c9be8204367a7e3f400e9508c7bf2f526be9cbcbdcd4af0851336465082d0e0
-
SSDEEP
12288:usNs2TLK/fRaWvemjcdFa2XbR5ORDB25Nm/u+FTHEK:n2eOfRal/naIGxBEmG+FTX
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-