Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
615c29309d7c0af3a24efabc780d3179_JaffaCakes118
-
Size
782KB
-
Sample
241020-kr4kkazane
-
MD5
615c29309d7c0af3a24efabc780d3179
-
SHA1
ca7c99bced2b7a758925db42571e4b191a0f3a1d
-
SHA256
21ecc1cfb8eb61af31c4d1a7778d076f38fe4d9210194d84eaae50f637230986
-
SHA512
0cc0d03edd45795f763e3a08a80be90554c823e37d346eaac72a8b8e4e79ab39428b204ac228599b3e887471fd3da8a1895e8389b9eaf2ede49fe56d217acd2b
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1E:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8B
Behavioral task
behavioral1
Sample
615c29309d7c0af3a24efabc780d3179_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
615c29309d7c0af3a24efabc780d3179_JaffaCakes118
-
Size
782KB
-
MD5
615c29309d7c0af3a24efabc780d3179
-
SHA1
ca7c99bced2b7a758925db42571e4b191a0f3a1d
-
SHA256
21ecc1cfb8eb61af31c4d1a7778d076f38fe4d9210194d84eaae50f637230986
-
SHA512
0cc0d03edd45795f763e3a08a80be90554c823e37d346eaac72a8b8e4e79ab39428b204ac228599b3e887471fd3da8a1895e8389b9eaf2ede49fe56d217acd2b
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1E:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8B
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-