Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_9342c42c91d8230ef41da6cc34df3580afedbee03706ac2d475397c21ed2feb7
-
Size
625KB
-
Sample
241224-mecmesvndm
-
MD5
aa624ec2c8c3321cecab70562c9dfb79
-
SHA1
437f9fe2312d275963fde19610db509b1f581ec8
-
SHA256
9342c42c91d8230ef41da6cc34df3580afedbee03706ac2d475397c21ed2feb7
-
SHA512
31fac3ea4b142e71a605af53744debf64b7973a759f85b808c388b1dab0ee2f4e664b6394f1c5d1f22133973584c2aaa1125ad7a04ad6269e8b68c21bf415898
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZA8:+w1lEKOpuYxiwkkgjAN8ZA8
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9342c42c91d8230ef41da6cc34df3580afedbee03706ac2d475397c21ed2feb7.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_9342c42c91d8230ef41da6cc34df3580afedbee03706ac2d475397c21ed2feb7
-
Size
625KB
-
MD5
aa624ec2c8c3321cecab70562c9dfb79
-
SHA1
437f9fe2312d275963fde19610db509b1f581ec8
-
SHA256
9342c42c91d8230ef41da6cc34df3580afedbee03706ac2d475397c21ed2feb7
-
SHA512
31fac3ea4b142e71a605af53744debf64b7973a759f85b808c388b1dab0ee2f4e664b6394f1c5d1f22133973584c2aaa1125ad7a04ad6269e8b68c21bf415898
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZA8:+w1lEKOpuYxiwkkgjAN8ZA8
-
Gozi family
-
Blocklisted process makes network request
-