Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
aa6f5f67522b27135b6910116b5f948c_JaffaCakes118
-
Size
438KB
-
Sample
240819-k8793sygpn
-
MD5
aa6f5f67522b27135b6910116b5f948c
-
SHA1
33b640319a63586aa75d8ddd87ebbf99a65b6830
-
SHA256
8d3e516aea82795d13094b64fe2fb4bd93831b94e3179cd4e36f3e6b4a8bcd28
-
SHA512
07a967ef3144c9c45301a465e2acfad4a7817d376a1687f4e31ef84482a4ef4a0ada2114e271fdc78448ab0f9828427c0450f1ae8c56d58ec4730bb79e15768b
-
SSDEEP
12288:3+ZrO9t1i9QDzf0NRo38NbXUR5CVP9QNey:ird9QDzuRosL9w
Behavioral task
behavioral1
Sample
aa6f5f67522b27135b6910116b5f948c_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
aa6f5f67522b27135b6910116b5f948c_JaffaCakes118
-
Size
438KB
-
MD5
aa6f5f67522b27135b6910116b5f948c
-
SHA1
33b640319a63586aa75d8ddd87ebbf99a65b6830
-
SHA256
8d3e516aea82795d13094b64fe2fb4bd93831b94e3179cd4e36f3e6b4a8bcd28
-
SHA512
07a967ef3144c9c45301a465e2acfad4a7817d376a1687f4e31ef84482a4ef4a0ada2114e271fdc78448ab0f9828427c0450f1ae8c56d58ec4730bb79e15768b
-
SSDEEP
12288:3+ZrO9t1i9QDzf0NRo38NbXUR5CVP9QNey:ird9QDzuRosL9w
-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-