Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_2ca0fc74cc82bf06c8379fd2a99999d3dfc5ceea06d5dc7d0784848da2d05ccd
-
Size
625KB
-
Sample
241225-hmm1xa1jfm
-
MD5
561b0e8d34e9fc914980e261b72b1032
-
SHA1
638545e94a842786f6e376086793dbea6bf6c1ff
-
SHA256
2ca0fc74cc82bf06c8379fd2a99999d3dfc5ceea06d5dc7d0784848da2d05ccd
-
SHA512
fd5b20b1649a9fae2a2e507bd718b881749a121ae20d0fcf3b0baf4652adce215830b877abed127e7033c01b9232dc9010623625dce9078bcf152d3577c5e337
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zg:+w1lEKOpuYxiwkkgjAN8Zg
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2ca0fc74cc82bf06c8379fd2a99999d3dfc5ceea06d5dc7d0784848da2d05ccd.dll
Resource
win7-20240708-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_2ca0fc74cc82bf06c8379fd2a99999d3dfc5ceea06d5dc7d0784848da2d05ccd
-
Size
625KB
-
MD5
561b0e8d34e9fc914980e261b72b1032
-
SHA1
638545e94a842786f6e376086793dbea6bf6c1ff
-
SHA256
2ca0fc74cc82bf06c8379fd2a99999d3dfc5ceea06d5dc7d0784848da2d05ccd
-
SHA512
fd5b20b1649a9fae2a2e507bd718b881749a121ae20d0fcf3b0baf4652adce215830b877abed127e7033c01b9232dc9010623625dce9078bcf152d3577c5e337
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zg:+w1lEKOpuYxiwkkgjAN8Zg
-
Gozi family
-
Blocklisted process makes network request
-