Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e4bb3cc73320332e049f7834cf0ddecb_JaffaCakes118
-
Size
982KB
-
Sample
240916-n8kqkawgkl
-
MD5
e4bb3cc73320332e049f7834cf0ddecb
-
SHA1
07c5292d5cf379721469c3138240137d385e891b
-
SHA256
5e8d154f85675b724f27313bce1dd439d851d206af6c7c1e50c8ab1baac5659e
-
SHA512
0912d2d47a5f3f3ab44d1be5e037d7ef30a45b6c043f98ffdfe0c36da3b178ee3add05365669c731433052f421b138c0c8190bf423043ff914361a535f70d425
-
SSDEEP
24576:hMgiW1oT+7MvxhhRIj8HKvcUx/ab8OKzeS6tPTanHwSeIV7Hzn:hMuUNFo8HKvD91KBTwQSeIV7Hzn
Behavioral task
behavioral1
Sample
e4bb3cc73320332e049f7834cf0ddecb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e4bb3cc73320332e049f7834cf0ddecb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e4bb3cc73320332e049f7834cf0ddecb_JaffaCakes118
-
Size
982KB
-
MD5
e4bb3cc73320332e049f7834cf0ddecb
-
SHA1
07c5292d5cf379721469c3138240137d385e891b
-
SHA256
5e8d154f85675b724f27313bce1dd439d851d206af6c7c1e50c8ab1baac5659e
-
SHA512
0912d2d47a5f3f3ab44d1be5e037d7ef30a45b6c043f98ffdfe0c36da3b178ee3add05365669c731433052f421b138c0c8190bf423043ff914361a535f70d425
-
SSDEEP
24576:hMgiW1oT+7MvxhhRIj8HKvcUx/ab8OKzeS6tPTanHwSeIV7Hzn:hMuUNFo8HKvD91KBTwQSeIV7Hzn
Score9/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Uses Tor communications
Malware can proxy its traffic through Tor for more anonymity.
-