Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ec8eaf9b6121c6d9f3ae66aa1fc83044_JaffaCakes118
-
Size
93KB
-
Sample
240920-bnz9as1hqn
-
MD5
ec8eaf9b6121c6d9f3ae66aa1fc83044
-
SHA1
936e1c98ff34e07defa35b7ff4c624196bc8d46e
-
SHA256
eec4efd535ea70a368d01d1e297f38a1fb3f19c4a38a3e4f594c3cd3420b8b97
-
SHA512
b95caa368b5c93306c75ced2b45a9eecfa0db41ad43f472eae9c0b887bf4dff0381e70afdce147f382d1234941dea195ebd18b03211634693f6b96458e85ee54
-
SSDEEP
1536:1eSiyzlYYoKPqtHm4yVsRgSwyN9dRFB3JOdemrcXbcPXo0JzTbyml4XJ71yvLu5B:1eZyBh9YG4TRTN9NBJkMidJz/Tl45wv0
Static task
static1
Behavioral task
behavioral1
Sample
ec8eaf9b6121c6d9f3ae66aa1fc83044_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Targets
-
-
Target
ec8eaf9b6121c6d9f3ae66aa1fc83044_JaffaCakes118
-
Size
93KB
-
MD5
ec8eaf9b6121c6d9f3ae66aa1fc83044
-
SHA1
936e1c98ff34e07defa35b7ff4c624196bc8d46e
-
SHA256
eec4efd535ea70a368d01d1e297f38a1fb3f19c4a38a3e4f594c3cd3420b8b97
-
SHA512
b95caa368b5c93306c75ced2b45a9eecfa0db41ad43f472eae9c0b887bf4dff0381e70afdce147f382d1234941dea195ebd18b03211634693f6b96458e85ee54
-
SSDEEP
1536:1eSiyzlYYoKPqtHm4yVsRgSwyN9dRFB3JOdemrcXbcPXo0JzTbyml4XJ71yvLu5B:1eZyBh9YG4TRTN9NBJkMidJz/Tl45wv0
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-