Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
46259480ca0ac420728f010006edcb43_JaffaCakes118
-
Size
320KB
-
Sample
241015-gka3wsybje
-
MD5
46259480ca0ac420728f010006edcb43
-
SHA1
4a60746da71500af3312ac8f7e3885ca9e469d07
-
SHA256
049a8e6041f86d99352e8dd1a17689bcc8f9f847169ec8bdc6f33b17691ef0b9
-
SHA512
cf69e4dab9e7d008169ef08eec048245bd241a0a048924ad1dd765f728808effa69e234b7c9beff041b5792247161f71e33b19bdf9835bcc8bf7373b23e9a122
-
SSDEEP
3072:SS/QfDyb8MxtAwpD4mXaXZv7FI4OYsXdbSOjFbtIz98m93SSh6KNlDz4YNKmvSQ:W/MxtGXZzFiYcTRtC98MiSkKrDz4
Static task
static1
Behavioral task
behavioral1
Sample
46259480ca0ac420728f010006edcb43_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
netwire
wealthyman.brasilia.me:39560
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
WEALTH
-
keylogger_dir
%AppData%\music\
-
lock_executable
false
-
offline_keylogger
true
-
password
sucess
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
46259480ca0ac420728f010006edcb43_JaffaCakes118
-
Size
320KB
-
MD5
46259480ca0ac420728f010006edcb43
-
SHA1
4a60746da71500af3312ac8f7e3885ca9e469d07
-
SHA256
049a8e6041f86d99352e8dd1a17689bcc8f9f847169ec8bdc6f33b17691ef0b9
-
SHA512
cf69e4dab9e7d008169ef08eec048245bd241a0a048924ad1dd765f728808effa69e234b7c9beff041b5792247161f71e33b19bdf9835bcc8bf7373b23e9a122
-
SSDEEP
3072:SS/QfDyb8MxtAwpD4mXaXZv7FI4OYsXdbSOjFbtIz98m93SSh6KNlDz4YNKmvSQ:W/MxtGXZzFiYcTRtC98MiSkKrDz4
-
NetWire RAT payload
-