Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118
-
Size
40KB
-
Sample
240726-z9r2tawapn
-
MD5
75c985a2deee1d98b2e26a07fe35ea1b
-
SHA1
ce2d092ca8fb1f44802d1860a0145ea984678af2
-
SHA256
ca62468ca46de3d3fa7a501ae00bc70aeb682a4098652934a1a450674eac0001
-
SHA512
56030053cb07db3b4dc08951f31a54a1927e6445c6b3914156b88b000730c808070dc012719134112e0b31bf0eb2b365eabf486043d4a806ec51b2aab83703a1
-
SSDEEP
768:/mVG2CkCYL8gJMuaaxxpKBKYxvbB6ogA2LsNNSsIcp:/mVG2CkCYL8gauxLpgxvso7Dbp
Static task
static1
Behavioral task
behavioral1
Sample
75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118
-
Size
40KB
-
MD5
75c985a2deee1d98b2e26a07fe35ea1b
-
SHA1
ce2d092ca8fb1f44802d1860a0145ea984678af2
-
SHA256
ca62468ca46de3d3fa7a501ae00bc70aeb682a4098652934a1a450674eac0001
-
SHA512
56030053cb07db3b4dc08951f31a54a1927e6445c6b3914156b88b000730c808070dc012719134112e0b31bf0eb2b365eabf486043d4a806ec51b2aab83703a1
-
SSDEEP
768:/mVG2CkCYL8gJMuaaxxpKBKYxvbB6ogA2LsNNSsIcp:/mVG2CkCYL8gauxLpgxvso7Dbp
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-