Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
11ba14343ec161f972c321d798e888a0_JaffaCakes118
-
Size
270KB
-
Sample
241004-ef1rmsxbrh
-
MD5
11ba14343ec161f972c321d798e888a0
-
SHA1
dd80670ac5af3a43e70e8ee69ccc7c55b6fd2b55
-
SHA256
1dd1141964a91abda104ac9ca5623c6eaa7908cad225ffbddccfb2c500b46ebf
-
SHA512
dda33ca61b598c30e03c47a35f296c1b12a43a5fd67ad1484a8e78e02bebd418f561f9a406333bdf944ec54d149544fc35e991de094e24465cbb9f3ee5448a8d
-
SSDEEP
6144:jsaocyLCf4Dm7ed5s53PewRZdWOumzrG3hs+ked5Fg6kEVjChMfE:jtobi4y6ymwRdG++bdg6hk+E
Static task
static1
Behavioral task
behavioral1
Sample
11ba14343ec161f972c321d798e888a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11ba14343ec161f972c321d798e888a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ins5.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ins5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
11ba14343ec161f972c321d798e888a0_JaffaCakes118
-
Size
270KB
-
MD5
11ba14343ec161f972c321d798e888a0
-
SHA1
dd80670ac5af3a43e70e8ee69ccc7c55b6fd2b55
-
SHA256
1dd1141964a91abda104ac9ca5623c6eaa7908cad225ffbddccfb2c500b46ebf
-
SHA512
dda33ca61b598c30e03c47a35f296c1b12a43a5fd67ad1484a8e78e02bebd418f561f9a406333bdf944ec54d149544fc35e991de094e24465cbb9f3ee5448a8d
-
SSDEEP
6144:jsaocyLCf4Dm7ed5s53PewRZdWOumzrG3hs+ked5Fg6kEVjChMfE:jtobi4y6ymwRdG++bdg6hk+E
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/ins5.exe
-
Size
214KB
-
MD5
081f1ef743489a25c99fdd25f6d4f70d
-
SHA1
dfdbd1caf714644f6c1b1b383f717028c39a2db0
-
SHA256
ed6b25ef9345aa31303cdc1cad322b1607eda3bf7bfefe7445105baddd59c635
-
SHA512
bf2962affa9ffb92cbaa17389a71b6ecf548cf6629237444a4b078bdcbd29cdd825055e2fe49530053c864bb1ad42726c083bb7db6d20b0afc939363365ec4ca
-
SSDEEP
3072:qpFqhbMvJOdrwfJ2aQTOhPCGketb/rFwhAsg/J/uz9VK94faaDjqo2YP9afwtfej:qGU0wJWTODk8bZw+/VOK9OqoDP9afx
Score6/10-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
8KB
-
MD5
249ae678f0dac4c625c6de6aca53823a
-
SHA1
6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
-
SHA256
7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
-
SHA512
66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
-
SSDEEP
192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
Score3/10 -