Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d2db3e05349418afa638be317d73563f_JaffaCakes118
-
Size
203KB
-
Sample
240907-z5r61sybke
-
MD5
d2db3e05349418afa638be317d73563f
-
SHA1
0b021befde3b2977c2ab10d4abc056626b272e70
-
SHA256
2e5d05dc4b3369220afe9ddd6de9dcc0c0001956dd8785ade4e4b8f9b24fc29b
-
SHA512
a89cdcf7f50a67949edf28ea745be22a8961c27654a595160ab18fa848452a37cf71a0d4701f02627eecd930859d4f5e36aec34bb98d1e3dc3c1647f7db38628
-
SSDEEP
3072:9Iji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9Cdp4uPZzGonqXGXh0bluBc4GZ5
Static task
static1
Behavioral task
behavioral1
Sample
d2db3e05349418afa638be317d73563f_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
d2db3e05349418afa638be317d73563f_JaffaCakes118
-
Size
203KB
-
MD5
d2db3e05349418afa638be317d73563f
-
SHA1
0b021befde3b2977c2ab10d4abc056626b272e70
-
SHA256
2e5d05dc4b3369220afe9ddd6de9dcc0c0001956dd8785ade4e4b8f9b24fc29b
-
SHA512
a89cdcf7f50a67949edf28ea745be22a8961c27654a595160ab18fa848452a37cf71a0d4701f02627eecd930859d4f5e36aec34bb98d1e3dc3c1647f7db38628
-
SSDEEP
3072:9Iji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9Cdp4uPZzGonqXGXh0bluBc4GZ5
-