Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
66aa8d3f50de5fa48dea20fea6db9f56_JaffaCakes118
-
Size
553KB
-
Sample
241021-n837xavdrj
-
MD5
66aa8d3f50de5fa48dea20fea6db9f56
-
SHA1
fd2e75c20716c165b5eac7219df1c24e26757366
-
SHA256
fe7c604514c39f076ea66503c2925b6d8927805b522b803c50cbdb5243e0feae
-
SHA512
61291a0987aa76defd8c5caca36c6d297a67284c75376366e93b7152eff436d4688eccca500197e60c8e009f0c5f3167ecf5cd2e77357443811236199380670e
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlv:+rt4/NArwjs5olv
Behavioral task
behavioral1
Sample
66aa8d3f50de5fa48dea20fea6db9f56_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
66aa8d3f50de5fa48dea20fea6db9f56_JaffaCakes118
-
Size
553KB
-
MD5
66aa8d3f50de5fa48dea20fea6db9f56
-
SHA1
fd2e75c20716c165b5eac7219df1c24e26757366
-
SHA256
fe7c604514c39f076ea66503c2925b6d8927805b522b803c50cbdb5243e0feae
-
SHA512
61291a0987aa76defd8c5caca36c6d297a67284c75376366e93b7152eff436d4688eccca500197e60c8e009f0c5f3167ecf5cd2e77357443811236199380670e
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlv:+rt4/NArwjs5olv
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-