Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_246558c61856da2962370102cb004b60d0ce769a9f6ee68e88a097a28a3b4fa8
-
Size
626KB
-
Sample
241224-qmr9maykbz
-
MD5
cf9ad20f6eeb86a93d1bd8f40024a438
-
SHA1
3dad5a86a774bb9c0398cc1e31361559e88d4bde
-
SHA256
246558c61856da2962370102cb004b60d0ce769a9f6ee68e88a097a28a3b4fa8
-
SHA512
c3c8ed68d4c6d3aa3d663410e2cb5ed20af4c6b4ab6c4858b030ae0a2538373f5cf64cfbad36c8398d08d40654084ccbc0c41c55bf4a9d2ded6e75cdcd58b8de
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZEZ:+w1lEKOpuYxiwkkgjAN8Z0
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_246558c61856da2962370102cb004b60d0ce769a9f6ee68e88a097a28a3b4fa8.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_246558c61856da2962370102cb004b60d0ce769a9f6ee68e88a097a28a3b4fa8
-
Size
626KB
-
MD5
cf9ad20f6eeb86a93d1bd8f40024a438
-
SHA1
3dad5a86a774bb9c0398cc1e31361559e88d4bde
-
SHA256
246558c61856da2962370102cb004b60d0ce769a9f6ee68e88a097a28a3b4fa8
-
SHA512
c3c8ed68d4c6d3aa3d663410e2cb5ed20af4c6b4ab6c4858b030ae0a2538373f5cf64cfbad36c8398d08d40654084ccbc0c41c55bf4a9d2ded6e75cdcd58b8de
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZEZ:+w1lEKOpuYxiwkkgjAN8Z0
-
Gozi family
-
Blocklisted process makes network request
-