Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8354ad1fab14c01f2707398bd0198e11_JaffaCakes118
-
Size
96KB
-
Sample
240802-g15bnsvenb
-
MD5
8354ad1fab14c01f2707398bd0198e11
-
SHA1
89461eab223e5fb13130b56ac3ed7026abc153d4
-
SHA256
8cb3b8c8007fe2642ead7dda5966d4193be6d7eb8312cf826c4e3587043df511
-
SHA512
fe9686e945b38e33899458295737e4f724bf15eaa73498dbb409557fa6faeec67e213e88db17933e1280246e17c775df52d749c789bf02cece4d0d96fa4f2ebe
-
SSDEEP
1536:+nRDdoT5ByBtnGxYbee2lAVJkEtQwoAzkIvc0rqVq5GnE9unGg1cQ7IoqAqLWQuy:yc5kBtGxJneJERAw9E9cFmQ7INA4t/Iy
Behavioral task
behavioral1
Sample
8354ad1fab14c01f2707398bd0198e11_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8354ad1fab14c01f2707398bd0198e11_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Malware Config
Targets
-
-
Target
8354ad1fab14c01f2707398bd0198e11_JaffaCakes118
-
Size
96KB
-
MD5
8354ad1fab14c01f2707398bd0198e11
-
SHA1
89461eab223e5fb13130b56ac3ed7026abc153d4
-
SHA256
8cb3b8c8007fe2642ead7dda5966d4193be6d7eb8312cf826c4e3587043df511
-
SHA512
fe9686e945b38e33899458295737e4f724bf15eaa73498dbb409557fa6faeec67e213e88db17933e1280246e17c775df52d749c789bf02cece4d0d96fa4f2ebe
-
SSDEEP
1536:+nRDdoT5ByBtnGxYbee2lAVJkEtQwoAzkIvc0rqVq5GnE9unGg1cQ7IoqAqLWQuy:yc5kBtGxJneJERAw9E9cFmQ7INA4t/Iy
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-