Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b366059a33151ceeaa20981f73a60b99_JaffaCakes118
-
Size
122KB
-
Sample
240821-pazmhaxere
-
MD5
b366059a33151ceeaa20981f73a60b99
-
SHA1
94c847040c554b0e1a1c941c39a6f68b03398be6
-
SHA256
77ae9a306194983c12c7870e6e6e9853f5ee20f4a496d7dd83404d461441593f
-
SHA512
8f3d79eccff8bcb08f8b72fb2ca76caaa80ea3e68008f3d1b02a14b634ef36828d74ae60436767c291b29a2ba646622c9f725b95dd41fc743ad5312277f6bf65
-
SSDEEP
3072:iNVhsaFx+PuoStCyf9pzESyjX3NiNgSrgL4:iFFFx+uBbEfNC
Static task
static1
Behavioral task
behavioral1
Sample
b366059a33151ceeaa20981f73a60b99_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b366059a33151ceeaa20981f73a60b99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b366059a33151ceeaa20981f73a60b99_JaffaCakes118
-
Size
122KB
-
MD5
b366059a33151ceeaa20981f73a60b99
-
SHA1
94c847040c554b0e1a1c941c39a6f68b03398be6
-
SHA256
77ae9a306194983c12c7870e6e6e9853f5ee20f4a496d7dd83404d461441593f
-
SHA512
8f3d79eccff8bcb08f8b72fb2ca76caaa80ea3e68008f3d1b02a14b634ef36828d74ae60436767c291b29a2ba646622c9f725b95dd41fc743ad5312277f6bf65
-
SSDEEP
3072:iNVhsaFx+PuoStCyf9pzESyjX3NiNgSrgL4:iFFFx+uBbEfNC
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-