Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8ccdf8857054fa2efc455b69258956a6_JaffaCakes118
-
Size
376KB
-
Sample
240812-b2bg4ayhmm
-
MD5
8ccdf8857054fa2efc455b69258956a6
-
SHA1
58bfe73edcb7c862e73bd35c6587ef12497295a1
-
SHA256
9e30fdfa70ce4289e48461c2862f1806e79633c0416fff1832a30d665ce7c1e8
-
SHA512
09a90013195ee2e9421681b81da399797de69f7bef96144a47bdc28d015b3b6331d65b7c3438a4ac6f8145181730412f15db39d74fe050cd88adfd5475fd25f1
-
SSDEEP
6144:jfYte9zBUGBIVKH1yF2idZecnl20lHRxp3g/KzXHwxrE7eMsSgmLVFweF4X3Y:EUFBGVKVuF3Z4mxxmKjQxw73sSgmLVyw
Static task
static1
Behavioral task
behavioral1
Sample
8ccdf8857054fa2efc455b69258956a6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8ccdf8857054fa2efc455b69258956a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8ccdf8857054fa2efc455b69258956a6_JaffaCakes118
-
Size
376KB
-
MD5
8ccdf8857054fa2efc455b69258956a6
-
SHA1
58bfe73edcb7c862e73bd35c6587ef12497295a1
-
SHA256
9e30fdfa70ce4289e48461c2862f1806e79633c0416fff1832a30d665ce7c1e8
-
SHA512
09a90013195ee2e9421681b81da399797de69f7bef96144a47bdc28d015b3b6331d65b7c3438a4ac6f8145181730412f15db39d74fe050cd88adfd5475fd25f1
-
SSDEEP
6144:jfYte9zBUGBIVKH1yF2idZecnl20lHRxp3g/KzXHwxrE7eMsSgmLVFweF4X3Y:EUFBGVKVuF3Z4mxxmKjQxw73sSgmLVyw
Score10/10-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-