Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5f3ab450cf10532d9fc66e016fd5d6c8_JaffaCakes118
-
Size
62KB
-
Sample
240720-gcvsbsydml
-
MD5
5f3ab450cf10532d9fc66e016fd5d6c8
-
SHA1
0b17e938d9ef9d5a401b561bc5ecbded4c9f5ca2
-
SHA256
56f8a6005c1ba6738c78d4175a60b18cc232e698aeb7246af83938b7f5200a6b
-
SHA512
5052e287d34e0d18c3a119558ebd4b8ca1afbbd43a3cbbc088564361743eeb8e6a9075379f7082719f61acd0a3539391e375c160b0951e4d622b9a9875108df9
-
SSDEEP
1536:YyGXi0hv7w04Jiy7ceqzrZrQ6rAqoqmhAY05+Xvlk2bJU8LL81UDkgUy:YyGXi0G0fyctzrdQ6rf3mR00/lk2bJU6
Static task
static1
Behavioral task
behavioral1
Sample
5f3ab450cf10532d9fc66e016fd5d6c8_JaffaCakes118.js
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f3ab450cf10532d9fc66e016fd5d6c8_JaffaCakes118.js
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5f3ab450cf10532d9fc66e016fd5d6c8_JaffaCakes118
-
Size
62KB
-
MD5
5f3ab450cf10532d9fc66e016fd5d6c8
-
SHA1
0b17e938d9ef9d5a401b561bc5ecbded4c9f5ca2
-
SHA256
56f8a6005c1ba6738c78d4175a60b18cc232e698aeb7246af83938b7f5200a6b
-
SHA512
5052e287d34e0d18c3a119558ebd4b8ca1afbbd43a3cbbc088564361743eeb8e6a9075379f7082719f61acd0a3539391e375c160b0951e4d622b9a9875108df9
-
SSDEEP
1536:YyGXi0hv7w04Jiy7ceqzrZrQ6rAqoqmhAY05+Xvlk2bJU8LL81UDkgUy:YyGXi0G0fyctzrdQ6rf3mR00/lk2bJU6
Score8/10-
Blocklisted process makes network request
-
Deletes itself
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-