Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e90994c2f83c0bb295ffb25818c28243_JaffaCakes118
-
Size
721KB
-
Sample
241213-a1b7kavlcl
-
MD5
e90994c2f83c0bb295ffb25818c28243
-
SHA1
5f6a91b23261e52cae9ac865e350bb80a3d83f96
-
SHA256
85a1a063f8d17ff428abd15a192fbd418b86ac125b28dd3ee95b0ee3115f5cec
-
SHA512
e937b37d66aeb6e3b75687af23d5720ab8a5b0dd98562aeaa30889622bc107f158e1285d9d6b9783a13aaab7d56acbdd0ec965644fc1a571f30c1cc7750e1a14
-
SSDEEP
12288:FokY8tYPd92f1SZj5Rhq+EWAKo17n3Cwcc0HK7z7lBKWj+GmG+JOYM20oFQmwQ52:NEdRhtANnoyFQGmG+Jf0oFQmwcmeXYr7
Static task
static1
Behavioral task
behavioral1
Sample
e90994c2f83c0bb295ffb25818c28243_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e90994c2f83c0bb295ffb25818c28243_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.ggraco.com - Port:
587 - Username:
[email protected] - Password:
admin@#1235
Targets
-
-
Target
e90994c2f83c0bb295ffb25818c28243_JaffaCakes118
-
Size
721KB
-
MD5
e90994c2f83c0bb295ffb25818c28243
-
SHA1
5f6a91b23261e52cae9ac865e350bb80a3d83f96
-
SHA256
85a1a063f8d17ff428abd15a192fbd418b86ac125b28dd3ee95b0ee3115f5cec
-
SHA512
e937b37d66aeb6e3b75687af23d5720ab8a5b0dd98562aeaa30889622bc107f158e1285d9d6b9783a13aaab7d56acbdd0ec965644fc1a571f30c1cc7750e1a14
-
SSDEEP
12288:FokY8tYPd92f1SZj5Rhq+EWAKo17n3Cwcc0HK7z7lBKWj+GmG+JOYM20oFQmwQ52:NEdRhtANnoyFQGmG+Jf0oFQmwcmeXYr7
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
AgentTesla payload
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-