Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
600b82e86ebd5721f4e5e434646418ea_JaffaCakes118
-
Size
556KB
-
Sample
241020-djkddsxckr
-
MD5
600b82e86ebd5721f4e5e434646418ea
-
SHA1
07f0d32fb7576ec92d16e3140dcebed68adf87f1
-
SHA256
6446734456c209df3cf8a4f10279a8d33d6ae60d11bc03636891e7c63febfa78
-
SHA512
cc55040fda4ecca23bc342cea09c453f99f29ac7297d7790fdc34d9dc2038d5a1aadbcf5c5e64b864bb402c6850b5862d8b3de73f291533589a33cb50434f0bf
-
SSDEEP
12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyJ:znPfQp9L3olqFJ
Behavioral task
behavioral1
Sample
600b82e86ebd5721f4e5e434646418ea_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
600b82e86ebd5721f4e5e434646418ea_JaffaCakes118
-
Size
556KB
-
MD5
600b82e86ebd5721f4e5e434646418ea
-
SHA1
07f0d32fb7576ec92d16e3140dcebed68adf87f1
-
SHA256
6446734456c209df3cf8a4f10279a8d33d6ae60d11bc03636891e7c63febfa78
-
SHA512
cc55040fda4ecca23bc342cea09c453f99f29ac7297d7790fdc34d9dc2038d5a1aadbcf5c5e64b864bb402c6850b5862d8b3de73f291533589a33cb50434f0bf
-
SSDEEP
12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyJ:znPfQp9L3olqFJ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-