Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118
-
Size
39KB
-
Sample
240824-chqy4szepd
-
MD5
bdcc4e0f965e8e5be8c249ce2c90667f
-
SHA1
d19af9edee821f2ff73275d4fe8a183b1e8cd7c5
-
SHA256
15bec42768964321b6bd6b7f90db296d8c6d5297eb27ce3e985e8b2f7ee8881d
-
SHA512
14e6e3740e4a3ddfa937f98a89f60b2c1af43256c6ce9d98ef5160043e1830379f172c504acf4074b75cff8849ece4b2909b1516fdf81b1ce80347968d935524
-
SSDEEP
768:HOsiuIUWcgJTPmSfKOsilK0CDm/9oxcmQL2TiexhAfF/684Qf5LuPB5:uslIUhgJPmeNsnHm/IcmuorAf5LFSB5
Static task
static1
Behavioral task
behavioral1
Sample
bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
bubblesuck595
Targets
-
-
Target
bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118
-
Size
39KB
-
MD5
bdcc4e0f965e8e5be8c249ce2c90667f
-
SHA1
d19af9edee821f2ff73275d4fe8a183b1e8cd7c5
-
SHA256
15bec42768964321b6bd6b7f90db296d8c6d5297eb27ce3e985e8b2f7ee8881d
-
SHA512
14e6e3740e4a3ddfa937f98a89f60b2c1af43256c6ce9d98ef5160043e1830379f172c504acf4074b75cff8849ece4b2909b1516fdf81b1ce80347968d935524
-
SSDEEP
768:HOsiuIUWcgJTPmSfKOsilK0CDm/9oxcmQL2TiexhAfF/684Qf5LuPB5:uslIUhgJPmeNsnHm/IcmuorAf5LFSB5
Score10/10-
Adds Run key to start application
-
Drops file in System32 directory
-