Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9460ddd0e629806364bcaba850e9415c_JaffaCakes118
-
Size
982KB
-
Sample
240813-xx4tqswdjj
-
MD5
9460ddd0e629806364bcaba850e9415c
-
SHA1
bf3eadc3f354f90c1ce10facf83dee1eaff3681c
-
SHA256
b983ae4301273ef2c7b5117e884574a14e43ec6f3bd0ab9df29040a4f2fad634
-
SHA512
cb7a4af073ae63489f9f6507838c498236f42312a3c9c19b68c03bc5d753574a05eea61724fb2579364cbb530ad0640a83dd20e9cfa5de9066d165c5a58b6867
-
SSDEEP
12288:0SjzwRzH1RighUFZzHtC9FDY8c8H+Lm/yjxeiSOHTApwn2fTrNsef1JOXa0ii:teVRrhMxY9FDY8cLa/OerzTrNtS4
Static task
static1
Behavioral task
behavioral1
Sample
9460ddd0e629806364bcaba850e9415c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9460ddd0e629806364bcaba850e9415c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
9460ddd0e629806364bcaba850e9415c_JaffaCakes118
-
Size
982KB
-
MD5
9460ddd0e629806364bcaba850e9415c
-
SHA1
bf3eadc3f354f90c1ce10facf83dee1eaff3681c
-
SHA256
b983ae4301273ef2c7b5117e884574a14e43ec6f3bd0ab9df29040a4f2fad634
-
SHA512
cb7a4af073ae63489f9f6507838c498236f42312a3c9c19b68c03bc5d753574a05eea61724fb2579364cbb530ad0640a83dd20e9cfa5de9066d165c5a58b6867
-
SSDEEP
12288:0SjzwRzH1RighUFZzHtC9FDY8c8H+Lm/yjxeiSOHTApwn2fTrNsef1JOXa0ii:teVRrhMxY9FDY8cLa/OerzTrNtS4
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-