Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15be586f7c58be26ae3d593b7a5bbd5b_JaffaCakes118
-
Size
156KB
-
Sample
240627-m2sl6azgkk
-
MD5
15be586f7c58be26ae3d593b7a5bbd5b
-
SHA1
ffc9adeb712531129be0eb39aad768081634f0ea
-
SHA256
d26a3823a07edf81d29c0a27b9e75fbc333cf79798e09d1b3c1aef27dafbfed6
-
SHA512
19058f5755aa1a475e0d2578c631b2b9db391f3c232d56eec244a2f8f679de94bac2fde4f30ced352fa3970abf6fcc65f3b6f6cd31a5fd6f6b2bfc15ee0f8222
-
SSDEEP
3072:uo0IpeXWit3tHpqVibRj1U9doMigzLe1a7Lt17haeRriuemHC1O:u1weGEPkibRG9dPigz60F11Vriuex1O
Behavioral task
behavioral1
Sample
15be586f7c58be26ae3d593b7a5bbd5b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15be586f7c58be26ae3d593b7a5bbd5b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
15be586f7c58be26ae3d593b7a5bbd5b_JaffaCakes118
-
Size
156KB
-
MD5
15be586f7c58be26ae3d593b7a5bbd5b
-
SHA1
ffc9adeb712531129be0eb39aad768081634f0ea
-
SHA256
d26a3823a07edf81d29c0a27b9e75fbc333cf79798e09d1b3c1aef27dafbfed6
-
SHA512
19058f5755aa1a475e0d2578c631b2b9db391f3c232d56eec244a2f8f679de94bac2fde4f30ced352fa3970abf6fcc65f3b6f6cd31a5fd6f6b2bfc15ee0f8222
-
SSDEEP
3072:uo0IpeXWit3tHpqVibRj1U9doMigzLe1a7Lt17haeRriuemHC1O:u1weGEPkibRG9dPigz60F11Vriuex1O
Score10/10-
Gh0st RAT payload
-
Server Software Component: Terminal Services DLL
-
Deletes itself
-
Loads dropped DLL
-