Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
34d3e39b77b23344dec3fae6e5fda55e_JaffaCakes118
-
Size
287KB
-
Sample
240710-p8w92ayhrq
-
MD5
34d3e39b77b23344dec3fae6e5fda55e
-
SHA1
e40e009adf48f31e1b8fd54e062d60370b8fabf1
-
SHA256
e0f619da87637abd456d750cd68fc651e429cc352cc5e17fda6bd974a9452037
-
SHA512
42aec53aa99c455ff0f13e1eb2d2fe32372ef07bf8742147f494542c7a56a30e53cdaa428ba2d2acd2d9e8d56f3e7f471a697e86f1905422309a374f859dc44a
-
SSDEEP
6144:IFw8wzBhaEUJ45mbS75gov65lvOrxRMiA4mhg6RHFl5GWdblky260BF6i5:IFszBhqS5mYCrvQRpA7hHeWd5c61i5
Static task
static1
Behavioral task
behavioral1
Sample
34d3e39b77b23344dec3fae6e5fda55e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34d3e39b77b23344dec3fae6e5fda55e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
34d3e39b77b23344dec3fae6e5fda55e_JaffaCakes118
-
Size
287KB
-
MD5
34d3e39b77b23344dec3fae6e5fda55e
-
SHA1
e40e009adf48f31e1b8fd54e062d60370b8fabf1
-
SHA256
e0f619da87637abd456d750cd68fc651e429cc352cc5e17fda6bd974a9452037
-
SHA512
42aec53aa99c455ff0f13e1eb2d2fe32372ef07bf8742147f494542c7a56a30e53cdaa428ba2d2acd2d9e8d56f3e7f471a697e86f1905422309a374f859dc44a
-
SSDEEP
6144:IFw8wzBhaEUJ45mbS75gov65lvOrxRMiA4mhg6RHFl5GWdblky260BF6i5:IFszBhqS5mYCrvQRpA7hHeWd5c61i5
Score10/10-
Gh0st RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-