Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cb974abbbc5b4f4ec9f6ef9a4118cfd8_JaffaCakes118
-
Size
208KB
-
Sample
241206-hjycga1kem
-
MD5
cb974abbbc5b4f4ec9f6ef9a4118cfd8
-
SHA1
cf6ffdc0f6e3a3935b04e1c3016024e279fab9bd
-
SHA256
1e709bad9464bd783de09f9cb28641ecce9cfb5c913b242d2e4eab13ef7576c5
-
SHA512
4c6c0e38eb780e25dedd3036cac5105a11e36e452eb8a06cb59e71278eb7f862c07c1f006d5355105c30f75156a3d6c7e6b4a0b0d86a6900e3901fb48207171b
-
SSDEEP
1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcRF+:PuchogM57bIL+eb61TVa+3MJb6h
Behavioral task
behavioral1
Sample
cb974abbbc5b4f4ec9f6ef9a4118cfd8_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
cb974abbbc5b4f4ec9f6ef9a4118cfd8_JaffaCakes118
-
Size
208KB
-
MD5
cb974abbbc5b4f4ec9f6ef9a4118cfd8
-
SHA1
cf6ffdc0f6e3a3935b04e1c3016024e279fab9bd
-
SHA256
1e709bad9464bd783de09f9cb28641ecce9cfb5c913b242d2e4eab13ef7576c5
-
SHA512
4c6c0e38eb780e25dedd3036cac5105a11e36e452eb8a06cb59e71278eb7f862c07c1f006d5355105c30f75156a3d6c7e6b4a0b0d86a6900e3901fb48207171b
-
SSDEEP
1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcRF+:PuchogM57bIL+eb61TVa+3MJb6h
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-