Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d01eadcbe926eb4b88688d39f6b4a619_JaffaCakes118
-
Size
157KB
-
Sample
241207-cb7chsvqel
-
MD5
d01eadcbe926eb4b88688d39f6b4a619
-
SHA1
36c9589f09e5c7b36235dfa9eb543879c0696931
-
SHA256
01c48676948d8aa4d0a1887c460778110853c6e3de3ab31bf0df28f9a223e158
-
SHA512
32335e1222197e39d536002e27665bbb0611ba843ad855da587eb1a1f9ed183985d2515ef9308bb12d6b74d2adcea0e6c63315d1a419c272c45d76c8c7b452ec
-
SSDEEP
3072:AL1pXzJuwr6ae4dtybxdSQZla2ttdbLAs4JbjEhS6mx7LM6e4fE:Ax3q/wtybxAQZlaA70jEh6+6q
Behavioral task
behavioral1
Sample
d01eadcbe926eb4b88688d39f6b4a619_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d01eadcbe926eb4b88688d39f6b4a619_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
d01eadcbe926eb4b88688d39f6b4a619_JaffaCakes118
-
Size
157KB
-
MD5
d01eadcbe926eb4b88688d39f6b4a619
-
SHA1
36c9589f09e5c7b36235dfa9eb543879c0696931
-
SHA256
01c48676948d8aa4d0a1887c460778110853c6e3de3ab31bf0df28f9a223e158
-
SHA512
32335e1222197e39d536002e27665bbb0611ba843ad855da587eb1a1f9ed183985d2515ef9308bb12d6b74d2adcea0e6c63315d1a419c272c45d76c8c7b452ec
-
SSDEEP
3072:AL1pXzJuwr6ae4dtybxdSQZla2ttdbLAs4JbjEhS6mx7LM6e4fE:Ax3q/wtybxAQZlaA70jEh6+6q
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-