Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_69385d1a8d6016537c7d5f8249abba2760d52ab4fd285e6709d1f0e6e45d1367
-
Size
625KB
-
Sample
241225-sfsypawmhp
-
MD5
e204a8fc8f7b3aac03543ae7416aa567
-
SHA1
f3f4286f2574d8d4f0f775f67915fe92c8bf6a13
-
SHA256
69385d1a8d6016537c7d5f8249abba2760d52ab4fd285e6709d1f0e6e45d1367
-
SHA512
7b19ef22dadf2993a190ae6584eccfb5b2a1ee34b1ae0f678d046d2f9be2e5bdce515c7473e61ac7e2bf6d8c64607f08eb558732679c016fce6573ea4c7448e5
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZQ:+w1lEKOpuYxiwkkgjAN8ZQ
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_69385d1a8d6016537c7d5f8249abba2760d52ab4fd285e6709d1f0e6e45d1367.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_69385d1a8d6016537c7d5f8249abba2760d52ab4fd285e6709d1f0e6e45d1367
-
Size
625KB
-
MD5
e204a8fc8f7b3aac03543ae7416aa567
-
SHA1
f3f4286f2574d8d4f0f775f67915fe92c8bf6a13
-
SHA256
69385d1a8d6016537c7d5f8249abba2760d52ab4fd285e6709d1f0e6e45d1367
-
SHA512
7b19ef22dadf2993a190ae6584eccfb5b2a1ee34b1ae0f678d046d2f9be2e5bdce515c7473e61ac7e2bf6d8c64607f08eb558732679c016fce6573ea4c7448e5
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZQ:+w1lEKOpuYxiwkkgjAN8ZQ
-
Gozi family
-
Blocklisted process makes network request
-