Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1cfba0904f4423463f764a11a6fd4251_JaffaCakes118
-
Size
920KB
-
Sample
240701-3sshss1dml
-
MD5
1cfba0904f4423463f764a11a6fd4251
-
SHA1
a00c004b4de481c921c5ad2c98dcd87724b4b0a1
-
SHA256
30b6438b14eac5337f6d0f81997a4fce356611fc19155ae3650d5df21e894e74
-
SHA512
cc902fe1d2206b0f584fe3c0ba3874db4189a4f226da4c54a2a632deb719bb3d58cf934b467c58ad2d0ffcdd2672aef96b79e118c17a067d05ead2e4a3879a5f
-
SSDEEP
24576:bwWfnaVoffEQmyO378WTkvEKT9Hgce1BHboDCm:cuaq34yDWTkvvT9HgdboDC
Static task
static1
Behavioral task
behavioral1
Sample
1cfba0904f4423463f764a11a6fd4251_JaffaCakes118.dll
Resource
win7-20240508-en
Malware Config
Extracted
dridex
10444
209.20.87.138:443
198.1.115.153:8172
151.236.29.248:6516
Targets
-
-
Target
1cfba0904f4423463f764a11a6fd4251_JaffaCakes118
-
Size
920KB
-
MD5
1cfba0904f4423463f764a11a6fd4251
-
SHA1
a00c004b4de481c921c5ad2c98dcd87724b4b0a1
-
SHA256
30b6438b14eac5337f6d0f81997a4fce356611fc19155ae3650d5df21e894e74
-
SHA512
cc902fe1d2206b0f584fe3c0ba3874db4189a4f226da4c54a2a632deb719bb3d58cf934b467c58ad2d0ffcdd2672aef96b79e118c17a067d05ead2e4a3879a5f
-
SSDEEP
24576:bwWfnaVoffEQmyO378WTkvEKT9Hgce1BHboDCm:cuaq34yDWTkvvT9HgdboDC
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-