Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4915e13ff1642028c458dd576c44142f_JaffaCakes118
-
Size
170KB
-
Sample
240715-kty3vsyamr
-
MD5
4915e13ff1642028c458dd576c44142f
-
SHA1
f731af1b5acdcc376cab976eeeaa196646fdbcb9
-
SHA256
ba18b133270ec5ac4f95db3657754e69a7c210e38d031d8839d6b6def5785a73
-
SHA512
cabf6cfc707633afcb023e09f34945ace4a0f369ed968e9e20d5b66a1a63a54b69a4b4c75ef00a2124365ec8af2d92033d70450023d9d89de04b5f0d7ed4134a
-
SSDEEP
3072:ALk395hYXJag6e5gEZDQQghyGl7b20cHPi+0XLTU8xlEl:AQq+eassQg0i2nq+0bTFlQ
Behavioral task
behavioral1
Sample
4915e13ff1642028c458dd576c44142f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4915e13ff1642028c458dd576c44142f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
2011522597.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
2011522597.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
4915e13ff1642028c458dd576c44142f_JaffaCakes118
-
Size
170KB
-
MD5
4915e13ff1642028c458dd576c44142f
-
SHA1
f731af1b5acdcc376cab976eeeaa196646fdbcb9
-
SHA256
ba18b133270ec5ac4f95db3657754e69a7c210e38d031d8839d6b6def5785a73
-
SHA512
cabf6cfc707633afcb023e09f34945ace4a0f369ed968e9e20d5b66a1a63a54b69a4b4c75ef00a2124365ec8af2d92033d70450023d9d89de04b5f0d7ed4134a
-
SSDEEP
3072:ALk395hYXJag6e5gEZDQQghyGl7b20cHPi+0XLTU8xlEl:AQq+eassQg0i2nq+0bTFlQ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
2011522597.exe
-
Size
100.2MB
-
MD5
38a95a5d96d27b7a365f3a874288b5ca
-
SHA1
3515820fbbac2dc3b97b698bf2bb3be3c8242843
-
SHA256
4affdb8cd5ed942b2b0593878d7ab2c5658628c460df6cb4cccd945b16356240
-
SHA512
83d989493d52f132fd08a5111b30e66296a9bb207ddbecca537bd60b0dcc5f8fadb0aa57f5b0c24a4a768a53540912cd2ceaf1173d08c66132d531a7a8c8db80
-
SSDEEP
3072:KTeTY1km5WBqwP3fspQ/Xz7iasXHyC/hX6Axv3yUt7LEwjj8BPOI5s8DxOi:KiTtiWB0mL7teJ5Vp3yO5j4G7a
Score6/10-
Adds Run key to start application
-