Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0e60642f21f5e25d644a032eb085b9f6_JaffaCakes118
-
Size
1.5MB
-
Sample
240625-rjx65svbnc
-
MD5
0e60642f21f5e25d644a032eb085b9f6
-
SHA1
a1e41e9576a20dd5f29f5ad1b6a246b287e9063c
-
SHA256
ec959d30cbd501b5e81246cc8b3e9ad171e4cf7b629a40fdae8acbd09a292bff
-
SHA512
d534b6f2bbccfbbfc2640589595afcf27b8f01e87f23edffa6df74f42ae16585e554c8a24e1765d8a4e4f82381738d698f8d2d44badfd330b71096b3f3b91625
-
SSDEEP
49152:j2XGhfikdOXuiej91aKz0BtFgQn+cM9a3NuZI:jiGNiPuXnzA5ys30Z
Static task
static1
Behavioral task
behavioral1
Sample
0e60642f21f5e25d644a032eb085b9f6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e60642f21f5e25d644a032eb085b9f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0e60642f21f5e25d644a032eb085b9f6_JaffaCakes118
-
Size
1.5MB
-
MD5
0e60642f21f5e25d644a032eb085b9f6
-
SHA1
a1e41e9576a20dd5f29f5ad1b6a246b287e9063c
-
SHA256
ec959d30cbd501b5e81246cc8b3e9ad171e4cf7b629a40fdae8acbd09a292bff
-
SHA512
d534b6f2bbccfbbfc2640589595afcf27b8f01e87f23edffa6df74f42ae16585e554c8a24e1765d8a4e4f82381738d698f8d2d44badfd330b71096b3f3b91625
-
SSDEEP
49152:j2XGhfikdOXuiej91aKz0BtFgQn+cM9a3NuZI:jiGNiPuXnzA5ys30Z
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-