Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f6cee187bcb4c29ef372b76fdc36f7a4_JaffaCakes118
-
Size
2.0MB
-
Sample
240925-zcf82szbqh
-
MD5
f6cee187bcb4c29ef372b76fdc36f7a4
-
SHA1
ca31fc692dbf09a7bca55c17b6fe5ef4b86bd422
-
SHA256
facd2dcb2a1382593dd63d2517819b20aa27b7ceb83df4ca5e0c2143d290833e
-
SHA512
80822e0d4688b3c34b679471c0bf97c40cfa924cb01d083941290bec70cf972b8c9fb4f2b7ff2d5a24b6360c628eb6513f7341fe6985e1170fe2af5af1e21291
-
SSDEEP
49152:y3nZtQL4N+4rregzhdeF0s4WEJss0XevR8Rm/51B76jiTP:y3nAoJrr1deRYssHSwRn76a
Static task
static1
Behavioral task
behavioral1
Sample
taxcalc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
taxcalc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
taxcalc.exe
-
Size
2.1MB
-
MD5
224dacf13fdc6208c259e80b60930bd9
-
SHA1
eef52ca52d0f4f9a25571109af2338c7a5cbfec5
-
SHA256
0daca8eedcc0dec62533adfe8f223d7c32f62ab61766916271af392379eae4f9
-
SHA512
a568732cb75b665603517f48034bf7fd2c658360809325c873454f2597d8981c143a0aa7adc74e658cfc6e230eeeae63bc8d186fa339b591de16838a5c3b356e
-
SSDEEP
49152:wCZN2Ev2HSNchehklLKsWuGtTMx5UMt6cd3:iscDmsWVw5UMt/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -