Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ebc9244e86cc5318d09bf062c67084c2_JaffaCakes118
-
Size
361KB
-
Sample
240919-vfrrqszanc
-
MD5
ebc9244e86cc5318d09bf062c67084c2
-
SHA1
43cc09cd651af0d0ca4635385dfb4b796085cbda
-
SHA256
e39833957b0f9e99d6d2a4c6ce4c28c63f6b083fb5fdded4da7dd3f8eb1c7846
-
SHA512
afdf45dffb3ec3e18d9a9ce3368db16d9594afa8eaad90d7fd64ed90144331ec8021be4b72349f3d35ed76d1bb14dd81b30a8fc3c9abb1334da79bafb63ed9df
-
SSDEEP
6144:QGs4XwY/HPJ6xzJ44nDWgRAkPUfGQn8xID0DMF+soQWqFqEYXqZwGPmf34fuDpbb:U4XF/H0dJR3PUfGLxe0Dlsfxq5XH3ygb
Static task
static1
Behavioral task
behavioral1
Sample
ebc9244e86cc5318d09bf062c67084c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebc9244e86cc5318d09bf062c67084c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ebc9244e86cc5318d09bf062c67084c2_JaffaCakes118
-
Size
361KB
-
MD5
ebc9244e86cc5318d09bf062c67084c2
-
SHA1
43cc09cd651af0d0ca4635385dfb4b796085cbda
-
SHA256
e39833957b0f9e99d6d2a4c6ce4c28c63f6b083fb5fdded4da7dd3f8eb1c7846
-
SHA512
afdf45dffb3ec3e18d9a9ce3368db16d9594afa8eaad90d7fd64ed90144331ec8021be4b72349f3d35ed76d1bb14dd81b30a8fc3c9abb1334da79bafb63ed9df
-
SSDEEP
6144:QGs4XwY/HPJ6xzJ44nDWgRAkPUfGQn8xID0DMF+soQWqFqEYXqZwGPmf34fuDpbb:U4XF/H0dJR3PUfGLxe0Dlsfxq5XH3ygb
Score8/10-
Server Software Component: Terminal Services DLL
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-