Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_41b92ef30601cf0bb6dad4cf6907bf62c8d596f58b546b667a074985b55be4f2
-
Size
626KB
-
Sample
241224-qmecrsykbs
-
MD5
4e1fcf585c4b6d7155426b19aa2764c6
-
SHA1
2bc0a28443dd2f26966b4a3d745db1c6a38d267d
-
SHA256
41b92ef30601cf0bb6dad4cf6907bf62c8d596f58b546b667a074985b55be4f2
-
SHA512
1a4cc5c0046676eed35b234af1dea382c5cdaf8662293dad75c8b98f40a8eb8d3b1599ab3385fac271937d349864c7035371316fac2c9327c13e9cb5f1452ba9
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z+J:+w1lEKOpuYxiwkkgjAN8Z+J
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_41b92ef30601cf0bb6dad4cf6907bf62c8d596f58b546b667a074985b55be4f2.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_41b92ef30601cf0bb6dad4cf6907bf62c8d596f58b546b667a074985b55be4f2
-
Size
626KB
-
MD5
4e1fcf585c4b6d7155426b19aa2764c6
-
SHA1
2bc0a28443dd2f26966b4a3d745db1c6a38d267d
-
SHA256
41b92ef30601cf0bb6dad4cf6907bf62c8d596f58b546b667a074985b55be4f2
-
SHA512
1a4cc5c0046676eed35b234af1dea382c5cdaf8662293dad75c8b98f40a8eb8d3b1599ab3385fac271937d349864c7035371316fac2c9327c13e9cb5f1452ba9
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z+J:+w1lEKOpuYxiwkkgjAN8Z+J
-
Gozi family
-
Blocklisted process makes network request
-