Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
23b469a54523f1ace4906556068187ee_JaffaCakes118
-
Size
69KB
-
Sample
240703-2myl7a1gkg
-
MD5
23b469a54523f1ace4906556068187ee
-
SHA1
78a14d5ae78359b84fc24f6d187b3377fa0b9ce5
-
SHA256
8cd6d7e0de2d0a6e2b450a3293b7f2535b2e5bea0b59ba5fb4089c6b9e1a26dd
-
SHA512
174db63b67e92b83a8b96139f0c55333967a01e2c398b387ab7b00d4b4476f9a1d6030798785a436c689ce2ef2cfa18676f704b31ccbf777d2d048435067daf4
-
SSDEEP
1536:2Qv2G7iUic/IFKy3gOF9pQkMtgxNAtDkMQtk+rW:hZNZtyQOuk1AtDkLtk+K
Static task
static1
Behavioral task
behavioral1
Sample
23b469a54523f1ace4906556068187ee_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23b469a54523f1ace4906556068187ee_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
23b469a54523f1ace4906556068187ee_JaffaCakes118
-
Size
69KB
-
MD5
23b469a54523f1ace4906556068187ee
-
SHA1
78a14d5ae78359b84fc24f6d187b3377fa0b9ce5
-
SHA256
8cd6d7e0de2d0a6e2b450a3293b7f2535b2e5bea0b59ba5fb4089c6b9e1a26dd
-
SHA512
174db63b67e92b83a8b96139f0c55333967a01e2c398b387ab7b00d4b4476f9a1d6030798785a436c689ce2ef2cfa18676f704b31ccbf777d2d048435067daf4
-
SSDEEP
1536:2Qv2G7iUic/IFKy3gOF9pQkMtgxNAtDkMQtk+rW:hZNZtyQOuk1AtDkLtk+K
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies WinLogon
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-