Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
04fb1f52568c65c6d033cf2c518f1261_JaffaCakes118
-
Size
216KB
-
Sample
241001-j3pp4stblh
-
MD5
04fb1f52568c65c6d033cf2c518f1261
-
SHA1
eb72be1e4db9b307f87989182fae6700dd9f7a78
-
SHA256
5ec414a67742ca49ffa8b710295e643dcb01e348c1b40515033613113f20e5ff
-
SHA512
526b3e04d20c9a33f545d1c02244e3b9aaccf72bbfa461c6fddddda1a97858041e00dfa5ef7914db92226d8c30cb7c8f482ba65d36a0821c5e7805322012ce04
-
SSDEEP
3072:0VQZytihuXq2eobs76FkkvtpOqRnupBT8V1+Uc6uQ:vZoqXoc9WtFRupBT8V1+9fQ
Static task
static1
Behavioral task
behavioral1
Sample
04fb1f52568c65c6d033cf2c518f1261_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04fb1f52568c65c6d033cf2c518f1261_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
04fb1f52568c65c6d033cf2c518f1261_JaffaCakes118
-
Size
216KB
-
MD5
04fb1f52568c65c6d033cf2c518f1261
-
SHA1
eb72be1e4db9b307f87989182fae6700dd9f7a78
-
SHA256
5ec414a67742ca49ffa8b710295e643dcb01e348c1b40515033613113f20e5ff
-
SHA512
526b3e04d20c9a33f545d1c02244e3b9aaccf72bbfa461c6fddddda1a97858041e00dfa5ef7914db92226d8c30cb7c8f482ba65d36a0821c5e7805322012ce04
-
SSDEEP
3072:0VQZytihuXq2eobs76FkkvtpOqRnupBT8V1+Uc6uQ:vZoqXoc9WtFRupBT8V1+9fQ
Score10/10-
Gh0st RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-