Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118
-
Size
688KB
-
Sample
241001-aq8ssawcqe
-
MD5
03c151aef988cda0fca2811e1a07a8a2
-
SHA1
c14895f270b49362b925927b112d475d04b43d1d
-
SHA256
75af57add1b2439e8efc5a5758ced53cca6458b79da1314cf54f10b795a9f675
-
SHA512
797ef58316044f5a174ee443538ba72321554d04a59ef78c33e6b29f6ef031da2a1e51ba0565b56beed3ced2f1a212cec3fb4a1470859459cc9b0f7d5719eddd
-
SSDEEP
12288:vsWdVgX1MwKcjZ+fEEIjEOyk/AXqUtQrX2Y5f4ZxRWERvTL6:/zg6wKcV+sECkXyrm4+LvT+
Behavioral task
behavioral1
Sample
03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118
-
Size
688KB
-
MD5
03c151aef988cda0fca2811e1a07a8a2
-
SHA1
c14895f270b49362b925927b112d475d04b43d1d
-
SHA256
75af57add1b2439e8efc5a5758ced53cca6458b79da1314cf54f10b795a9f675
-
SHA512
797ef58316044f5a174ee443538ba72321554d04a59ef78c33e6b29f6ef031da2a1e51ba0565b56beed3ced2f1a212cec3fb4a1470859459cc9b0f7d5719eddd
-
SSDEEP
12288:vsWdVgX1MwKcjZ+fEEIjEOyk/AXqUtQrX2Y5f4ZxRWERvTL6:/zg6wKcV+sECkXyrm4+LvT+
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-