Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bac6e19829565602957af9ad05caea1d_JaffaCakes118
-
Size
604KB
-
Sample
240823-hyrhga1cnc
-
MD5
bac6e19829565602957af9ad05caea1d
-
SHA1
318771bc62247154a114eea473f21481a434ec04
-
SHA256
c22472bfe3243d6eff9a1fde7a6beba09fc9f4772f098a6a9c0809a67c1c328a
-
SHA512
82f4f1a55a55566a3cc6faa2852fcdf1dcac008befb1097f16a8784ea32270508e1155329fa76f51d42a62cdb7104a91377ecee287a08a9077200ea8a66c4a9c
-
SSDEEP
12288:czjnJWbz1zM5DiintQ0kyfXs0qT6ATQQfkCTkLJI5HVX7frTp/NNY:czjngdWmin4qMT6GQCTk1I5H9frhNy
Behavioral task
behavioral1
Sample
bac6e19829565602957af9ad05caea1d_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
bac6e19829565602957af9ad05caea1d_JaffaCakes118
-
Size
604KB
-
MD5
bac6e19829565602957af9ad05caea1d
-
SHA1
318771bc62247154a114eea473f21481a434ec04
-
SHA256
c22472bfe3243d6eff9a1fde7a6beba09fc9f4772f098a6a9c0809a67c1c328a
-
SHA512
82f4f1a55a55566a3cc6faa2852fcdf1dcac008befb1097f16a8784ea32270508e1155329fa76f51d42a62cdb7104a91377ecee287a08a9077200ea8a66c4a9c
-
SSDEEP
12288:czjnJWbz1zM5DiintQ0kyfXs0qT6ATQQfkCTkLJI5HVX7frTp/NNY:czjngdWmin4qMT6GQCTk1I5H9frhNy
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-