Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_c9a7a09e0be924ab584e459d51f74c496a6f1347ad706b135a9918dd2b71a620
-
Size
624KB
-
Sample
241225-ejbxpaxmdk
-
MD5
b9afdc71715b9bc67a120ff406d6faa5
-
SHA1
723d29ba1446ee5b5e4fa4dab88c5839ee257ac1
-
SHA256
c9a7a09e0be924ab584e459d51f74c496a6f1347ad706b135a9918dd2b71a620
-
SHA512
816b373801fa49ed8978d4c0867ea0786382fd8963f51b9e3bd5b29759d498f10a6db8b933f52159d549761efed27e39380e35c9e92d293a8d4a299ad210917f
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zn:+w1lEKOpuYxiwkkgjAN8Zn
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c9a7a09e0be924ab584e459d51f74c496a6f1347ad706b135a9918dd2b71a620.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_c9a7a09e0be924ab584e459d51f74c496a6f1347ad706b135a9918dd2b71a620
-
Size
624KB
-
MD5
b9afdc71715b9bc67a120ff406d6faa5
-
SHA1
723d29ba1446ee5b5e4fa4dab88c5839ee257ac1
-
SHA256
c9a7a09e0be924ab584e459d51f74c496a6f1347ad706b135a9918dd2b71a620
-
SHA512
816b373801fa49ed8978d4c0867ea0786382fd8963f51b9e3bd5b29759d498f10a6db8b933f52159d549761efed27e39380e35c9e92d293a8d4a299ad210917f
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zn:+w1lEKOpuYxiwkkgjAN8Zn
-
Gozi family
-
Blocklisted process makes network request
-