Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
64c65eab2ffae4d28cf39aacfc529097_JaffaCakes118
-
Size
466KB
-
Sample
241021-ad88sayand
-
MD5
64c65eab2ffae4d28cf39aacfc529097
-
SHA1
d7e434a005c8dfbfbdbf9213a702174fd87146a2
-
SHA256
86fa5ba5cc108a5c82aa81e5ab15838bb9d0219c2aea0b66d55186ed15fe7bf3
-
SHA512
da63fa9b08b4a306c40ab95f9256f96722b4fef61b2114de92ff0aafc4559c06112f8da5e12c87f63a0192b255a54156672b1a51dc4aca0896448d78327a79f3
-
SSDEEP
12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mB:jx9GzHlTv/b35tecFB6E
Behavioral task
behavioral1
Sample
64c65eab2ffae4d28cf39aacfc529097_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
64c65eab2ffae4d28cf39aacfc529097_JaffaCakes118
-
Size
466KB
-
MD5
64c65eab2ffae4d28cf39aacfc529097
-
SHA1
d7e434a005c8dfbfbdbf9213a702174fd87146a2
-
SHA256
86fa5ba5cc108a5c82aa81e5ab15838bb9d0219c2aea0b66d55186ed15fe7bf3
-
SHA512
da63fa9b08b4a306c40ab95f9256f96722b4fef61b2114de92ff0aafc4559c06112f8da5e12c87f63a0192b255a54156672b1a51dc4aca0896448d78327a79f3
-
SSDEEP
12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mB:jx9GzHlTv/b35tecFB6E
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-