Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d63b2a55540458efae28ef1195bb63b1_JaffaCakes118
-
Size
453KB
-
Sample
240909-nq2alayaja
-
MD5
d63b2a55540458efae28ef1195bb63b1
-
SHA1
33abd01baa25a515d21627f4f276f3c4e260ad8b
-
SHA256
4081085f66c8e022b8e55822166f872dad6c66221f46ef579567cd9e07b6c9dc
-
SHA512
8f1b3c5055d65bf3902c85a9b6381c2348645886a8dfbe5e13230d1783174843e4ad949d330b1d31347f2dee909fa78101f3a20bb11194d437c6f49cf59dd3a7
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnd:CMpASIcWYx2U6hAJQnm
Behavioral task
behavioral1
Sample
d63b2a55540458efae28ef1195bb63b1_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
d63b2a55540458efae28ef1195bb63b1_JaffaCakes118
-
Size
453KB
-
MD5
d63b2a55540458efae28ef1195bb63b1
-
SHA1
33abd01baa25a515d21627f4f276f3c4e260ad8b
-
SHA256
4081085f66c8e022b8e55822166f872dad6c66221f46ef579567cd9e07b6c9dc
-
SHA512
8f1b3c5055d65bf3902c85a9b6381c2348645886a8dfbe5e13230d1783174843e4ad949d330b1d31347f2dee909fa78101f3a20bb11194d437c6f49cf59dd3a7
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnd:CMpASIcWYx2U6hAJQnm
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-