Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_e5a2b9aa62262b857b7ee310ee631b2bfe11b68a9dcd22021fcc74a53fdd86b2
-
Size
625KB
-
Sample
241225-pkjzssspav
-
MD5
54b91679028acb778173c7bbef630ed4
-
SHA1
93f8ef4955020f5c1cc556b65bd7efd4c833be36
-
SHA256
e5a2b9aa62262b857b7ee310ee631b2bfe11b68a9dcd22021fcc74a53fdd86b2
-
SHA512
79e18490ce4a0ec06cee77bb487c026df87f906c96c4073d68292219ffe5511a88deba143225b67b116133ace32af9ae4b9878306a96892bb0d706ebaa48226f
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z2:+w1lEKOpuYxiwkkgjAN8Z2
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e5a2b9aa62262b857b7ee310ee631b2bfe11b68a9dcd22021fcc74a53fdd86b2.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_e5a2b9aa62262b857b7ee310ee631b2bfe11b68a9dcd22021fcc74a53fdd86b2
-
Size
625KB
-
MD5
54b91679028acb778173c7bbef630ed4
-
SHA1
93f8ef4955020f5c1cc556b65bd7efd4c833be36
-
SHA256
e5a2b9aa62262b857b7ee310ee631b2bfe11b68a9dcd22021fcc74a53fdd86b2
-
SHA512
79e18490ce4a0ec06cee77bb487c026df87f906c96c4073d68292219ffe5511a88deba143225b67b116133ace32af9ae4b9878306a96892bb0d706ebaa48226f
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z2:+w1lEKOpuYxiwkkgjAN8Z2
-
Gozi family
-
Blocklisted process makes network request
-