Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
eb8829c34f6067b28facb0099e2fd3ea_JaffaCakes118
-
Size
94KB
-
Sample
240919-rvqlfatfkp
-
MD5
eb8829c34f6067b28facb0099e2fd3ea
-
SHA1
11ba318bf71a351d8ca60022749fff7d6a8c8513
-
SHA256
d900252b1761735a049985147f3d8d812ff0e9833a9c2568cac2f9c987cac2fa
-
SHA512
ec43698f0a60e15c776cf641f2a166cdc02cf89763dcbbc9e1c40b38a38f8363f7404c01a7497eda95892aeb0f812cf7bdbc92284de554aeaff6f5cbf0909779
-
SSDEEP
1536:x5I/MMSEqMjrvXJOA5lQZVFhZhYyXcabrPlflh2Y5fxQoZyWg9yMzGKH/MtJfRZX:7yMMSTMjrxO+lIVbZhlciFlcYNqcASQ4
Static task
static1
Behavioral task
behavioral1
Sample
eb8829c34f6067b28facb0099e2fd3ea_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
eb8829c34f6067b28facb0099e2fd3ea_JaffaCakes118
-
Size
94KB
-
MD5
eb8829c34f6067b28facb0099e2fd3ea
-
SHA1
11ba318bf71a351d8ca60022749fff7d6a8c8513
-
SHA256
d900252b1761735a049985147f3d8d812ff0e9833a9c2568cac2f9c987cac2fa
-
SHA512
ec43698f0a60e15c776cf641f2a166cdc02cf89763dcbbc9e1c40b38a38f8363f7404c01a7497eda95892aeb0f812cf7bdbc92284de554aeaff6f5cbf0909779
-
SSDEEP
1536:x5I/MMSEqMjrvXJOA5lQZVFhZhYyXcabrPlflh2Y5fxQoZyWg9yMzGKH/MtJfRZX:7yMMSTMjrxO+lIVbZhlciFlcYNqcASQ4
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-