Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_34b02ca9ae4deab8c857d53bb36f033546b860d75e02e830456f2fafd638369d
-
Size
625KB
-
Sample
241224-lg2hwstngy
-
MD5
aed995a3ddd836cae313dbd6b97f861c
-
SHA1
8beb500266a91af1c828cd272f60a3595525374b
-
SHA256
34b02ca9ae4deab8c857d53bb36f033546b860d75e02e830456f2fafd638369d
-
SHA512
7f4c2f1c2d396cbce53f137f7ac3e561924e66d5e13723c39e6025d80b6493c0da845be5367b116361236724d3da2654d3320364261759be50a998c95c32f296
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z+:+w1lEKOpuYxiwkkgjAN8Z+
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_34b02ca9ae4deab8c857d53bb36f033546b860d75e02e830456f2fafd638369d.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_34b02ca9ae4deab8c857d53bb36f033546b860d75e02e830456f2fafd638369d
-
Size
625KB
-
MD5
aed995a3ddd836cae313dbd6b97f861c
-
SHA1
8beb500266a91af1c828cd272f60a3595525374b
-
SHA256
34b02ca9ae4deab8c857d53bb36f033546b860d75e02e830456f2fafd638369d
-
SHA512
7f4c2f1c2d396cbce53f137f7ac3e561924e66d5e13723c39e6025d80b6493c0da845be5367b116361236724d3da2654d3320364261759be50a998c95c32f296
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z+:+w1lEKOpuYxiwkkgjAN8Z+
-
Gozi family
-
Blocklisted process makes network request
-