Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ce78de45314b8a4b4f209135656119e1_JaffaCakes118
-
Size
142KB
-
Sample
240906-dacxyssena
-
MD5
ce78de45314b8a4b4f209135656119e1
-
SHA1
4688dbbb1c9c3a21f6a95043b968d121f6aaa4aa
-
SHA256
56dfd0f0158a03100c555377e533b61e3e84dbe5bfdbdf554097f27242411915
-
SHA512
6a1f2d0cee4f066dc7c5319c031e7cc08bdae06f776355d0e7bffa324293d69ee837509c08a5c9f0e6c87185919dfd1767541e00017999b4603f06286d7a6c35
-
SSDEEP
1536:ALRD3bNqfNpu39IId5a6XP3Mg8afCq1SoF3Cgar3Pd0MZXiNjLoox:8R1qf69xak3MgxCPoMFr3Pd0MZXiNPvx
Static task
static1
Behavioral task
behavioral1
Sample
ce78de45314b8a4b4f209135656119e1_JaffaCakes118.doc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce78de45314b8a4b4f209135656119e1_JaffaCakes118.doc
Resource
win10v2004-20240802-en
Malware Config
Extracted
https://shop.mtcss.co.uk/wp-admin/USQFPj/
https://handfinger.com/wp-includes/iCY/
http://hanulmotors.com/nbqso/8Tz/
http://helpinghands4needy.org/wp-content/LgrI9g/
http://www.ecobaratocanaria.com/wordpress/Jt/
http://macerindia.com/wp-content/hRS/
http://cfn.tvstartup.com/wp-content/7dNH1LI/
Targets
-
-
Target
ce78de45314b8a4b4f209135656119e1_JaffaCakes118
-
Size
142KB
-
MD5
ce78de45314b8a4b4f209135656119e1
-
SHA1
4688dbbb1c9c3a21f6a95043b968d121f6aaa4aa
-
SHA256
56dfd0f0158a03100c555377e533b61e3e84dbe5bfdbdf554097f27242411915
-
SHA512
6a1f2d0cee4f066dc7c5319c031e7cc08bdae06f776355d0e7bffa324293d69ee837509c08a5c9f0e6c87185919dfd1767541e00017999b4603f06286d7a6c35
-
SSDEEP
1536:ALRD3bNqfNpu39IId5a6XP3Mg8afCq1SoF3Cgar3Pd0MZXiNjLoox:8R1qf69xak3MgxCPoMFr3Pd0MZXiNPvx
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-