Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_0d359fab0e85b0c0ee95a674f927ee449e3f5ff950b25b736254073a0fc21456
-
Size
626KB
-
Sample
241225-ez5vpsyjam
-
MD5
64a8eaafefffb3b2b1b71d18c7c0b736
-
SHA1
9d96bffb90611cabebb3dfee0530f78df9f3f77c
-
SHA256
0d359fab0e85b0c0ee95a674f927ee449e3f5ff950b25b736254073a0fc21456
-
SHA512
48039cacb0a090968c3013af7d4f03dc7a28d5eb858409f2adeba6487422e7733cfad61ae7d4f2e139d3ff6d4c33bf367582be17a180df37b19364e84beebd9c
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zs:+w1lEKOpuYxiwkkgjAN8Zs
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0d359fab0e85b0c0ee95a674f927ee449e3f5ff950b25b736254073a0fc21456.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_0d359fab0e85b0c0ee95a674f927ee449e3f5ff950b25b736254073a0fc21456
-
Size
626KB
-
MD5
64a8eaafefffb3b2b1b71d18c7c0b736
-
SHA1
9d96bffb90611cabebb3dfee0530f78df9f3f77c
-
SHA256
0d359fab0e85b0c0ee95a674f927ee449e3f5ff950b25b736254073a0fc21456
-
SHA512
48039cacb0a090968c3013af7d4f03dc7a28d5eb858409f2adeba6487422e7733cfad61ae7d4f2e139d3ff6d4c33bf367582be17a180df37b19364e84beebd9c
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zs:+w1lEKOpuYxiwkkgjAN8Zs
-
Gozi family
-
Blocklisted process makes network request
-