Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ad9550ee6ece8322501ed92d374d3928_JaffaCakes118
-
Size
165KB
-
Sample
240820-c6ntnatdql
-
MD5
ad9550ee6ece8322501ed92d374d3928
-
SHA1
d0617e5cb90b4db4fcf2269ffd8228b9ca4f89af
-
SHA256
74423c8236cd5057af8e4ffbf84fdcbb34f5e6dc8f8dc0520c685c7fd6bc100a
-
SHA512
531ab2de644449e17e4f6d4a708f98a89bd6ac972b0bc6ed6b725205e5a0412ef6b0dfa9bdb422f6732c5396b8d0c82783c88c3727496488c71cb960b25d2f0b
-
SSDEEP
3072:bScKoSsxzNDZLDZjlbR868O8KlVH3jiKq7uDphYHceXVhca+fMHLtyeGxcl8OUMj:OcKoSsxzNDZLDZjlbR868O8KlVH3jiK+
Behavioral task
behavioral1
Sample
ad9550ee6ece8322501ed92d374d3928_JaffaCakes118.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad9550ee6ece8322501ed92d374d3928_JaffaCakes118.xls
Resource
win10v2004-20240802-en
Malware Config
Extracted
http://www.chipmania.it/mails/open.php
Targets
-
-
Target
ad9550ee6ece8322501ed92d374d3928_JaffaCakes118
-
Size
165KB
-
MD5
ad9550ee6ece8322501ed92d374d3928
-
SHA1
d0617e5cb90b4db4fcf2269ffd8228b9ca4f89af
-
SHA256
74423c8236cd5057af8e4ffbf84fdcbb34f5e6dc8f8dc0520c685c7fd6bc100a
-
SHA512
531ab2de644449e17e4f6d4a708f98a89bd6ac972b0bc6ed6b725205e5a0412ef6b0dfa9bdb422f6732c5396b8d0c82783c88c3727496488c71cb960b25d2f0b
-
SSDEEP
3072:bScKoSsxzNDZLDZjlbR868O8KlVH3jiKq7uDphYHceXVhca+fMHLtyeGxcl8OUMj:OcKoSsxzNDZLDZjlbR868O8KlVH3jiK+
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-