Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fd562b8c9a72c514f3b2d8b6526a8af3_JaffaCakes118
-
Size
636KB
-
Sample
241218-18krsavncj
-
MD5
fd562b8c9a72c514f3b2d8b6526a8af3
-
SHA1
c625aaea68060832414186a5c15d4257d123731f
-
SHA256
ef3f42512d66ae459bbf843030e0491c68a513da7a4164d485ad966f57a2fcd9
-
SHA512
cd34fdfc220ca559cd118bc3f181a51a1eb0a9df67e19047941ce6328a5d35209642664f42645c229bfdc4c1afa5c48059c0a2e5c49eac4f0989499308c3863d
-
SSDEEP
12288:jVU1rL/PgZ2YQCCE9NOUyZmNE/ftF3Z4mxxvDqVTVOCcGPiWC:jVSTPoVQHUN4ZhXtQmXuVTzcGPC
Static task
static1
Behavioral task
behavioral1
Sample
fd562b8c9a72c514f3b2d8b6526a8af3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fd562b8c9a72c514f3b2d8b6526a8af3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
fd562b8c9a72c514f3b2d8b6526a8af3_JaffaCakes118
-
Size
636KB
-
MD5
fd562b8c9a72c514f3b2d8b6526a8af3
-
SHA1
c625aaea68060832414186a5c15d4257d123731f
-
SHA256
ef3f42512d66ae459bbf843030e0491c68a513da7a4164d485ad966f57a2fcd9
-
SHA512
cd34fdfc220ca559cd118bc3f181a51a1eb0a9df67e19047941ce6328a5d35209642664f42645c229bfdc4c1afa5c48059c0a2e5c49eac4f0989499308c3863d
-
SSDEEP
12288:jVU1rL/PgZ2YQCCE9NOUyZmNE/ftF3Z4mxxvDqVTVOCcGPiWC:jVSTPoVQHUN4ZhXtQmXuVTzcGPC
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-