Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118
-
Size
164KB
-
Sample
240716-c6al2a1epr
-
MD5
4c77dc9422e6a10a5d665fddd28dc6de
-
SHA1
d634b9115c12a647572fa41310db0d527c1c43a4
-
SHA256
0f64ae6002a31ccf74595b02abe8d234c27908f5cc053f4badee69bb42b496c4
-
SHA512
5c69ea9943aa21ae2713346184cea3d9fc3dd5345185ccf2fc2cad23d7df3784d11ef2ef5d0aea6dbd46c27121982e4ad058b030860819228bb9ac3ab5ab2413
-
SSDEEP
3072:1qpMJFLXBpNum6V0P60/KV69R1Vu8ljAE+cQqCdXe8hTJI:1qGvN4V0Pt9R1Vu8l0B9e8hTi
Static task
static1
Behavioral task
behavioral1
Sample
4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118
-
Size
164KB
-
MD5
4c77dc9422e6a10a5d665fddd28dc6de
-
SHA1
d634b9115c12a647572fa41310db0d527c1c43a4
-
SHA256
0f64ae6002a31ccf74595b02abe8d234c27908f5cc053f4badee69bb42b496c4
-
SHA512
5c69ea9943aa21ae2713346184cea3d9fc3dd5345185ccf2fc2cad23d7df3784d11ef2ef5d0aea6dbd46c27121982e4ad058b030860819228bb9ac3ab5ab2413
-
SSDEEP
3072:1qpMJFLXBpNum6V0P60/KV69R1Vu8ljAE+cQqCdXe8hTJI:1qGvN4V0Pt9R1Vu8l0B9e8hTi
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-