Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5cfb7c623d430044777099408ccbcf9c_JaffaCakes118
-
Size
216KB
-
Sample
240719-wabzrswdjc
-
MD5
5cfb7c623d430044777099408ccbcf9c
-
SHA1
3e4e44868a35f66a9ebab369b1ed50116ca31bf3
-
SHA256
81d68440a13b92c050d5733e2d4b0ee43f41b896e7281f5ce50f9d902b46c03a
-
SHA512
4ee04b9a8066577a56e73e282a8f526f8d0084d353562fa98178e7839a34d42fe7d8c3d30f535e3131e67f79dfb7195c8ae18310e0b72edbd6368eeea55410be
-
SSDEEP
6144:mBp0S7F+9rorhkPkr0bT0ckLaz/RJeIaAuiIv4wg9WNltq1QQIO7gTxZf/wD:mBJ+9bT0ckLaz/RJeIaAuiIv4wFNltql
Static task
static1
Behavioral task
behavioral1
Sample
5cfb7c623d430044777099408ccbcf9c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5cfb7c623d430044777099408ccbcf9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5cfb7c623d430044777099408ccbcf9c_JaffaCakes118
-
Size
216KB
-
MD5
5cfb7c623d430044777099408ccbcf9c
-
SHA1
3e4e44868a35f66a9ebab369b1ed50116ca31bf3
-
SHA256
81d68440a13b92c050d5733e2d4b0ee43f41b896e7281f5ce50f9d902b46c03a
-
SHA512
4ee04b9a8066577a56e73e282a8f526f8d0084d353562fa98178e7839a34d42fe7d8c3d30f535e3131e67f79dfb7195c8ae18310e0b72edbd6368eeea55410be
-
SSDEEP
6144:mBp0S7F+9rorhkPkr0bT0ckLaz/RJeIaAuiIv4wg9WNltq1QQIO7gTxZf/wD:mBJ+9bT0ckLaz/RJeIaAuiIv4wFNltql
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-