Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_d0206cc371bf1df003edb9ec18692f29844a865b2c5f7b0d0bab765081858bc7
-
Size
624KB
-
Sample
241225-tw3y9syjdx
-
MD5
3521f96b2c8bab17bae7948af82f2a04
-
SHA1
65183f494e5c1f73b5388127c54b6bef5da7e433
-
SHA256
d0206cc371bf1df003edb9ec18692f29844a865b2c5f7b0d0bab765081858bc7
-
SHA512
40c61a167730bc8f1a2d80dcf93957fd27201df16798bce794e20668673776bd0b164c5804f9d9c65b00e958840972eed507db6b9cd8a7a5eef1b0107c8ceb20
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZL:+w1lEKOpuYxiwkkgjAN8ZL
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d0206cc371bf1df003edb9ec18692f29844a865b2c5f7b0d0bab765081858bc7.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_d0206cc371bf1df003edb9ec18692f29844a865b2c5f7b0d0bab765081858bc7
-
Size
624KB
-
MD5
3521f96b2c8bab17bae7948af82f2a04
-
SHA1
65183f494e5c1f73b5388127c54b6bef5da7e433
-
SHA256
d0206cc371bf1df003edb9ec18692f29844a865b2c5f7b0d0bab765081858bc7
-
SHA512
40c61a167730bc8f1a2d80dcf93957fd27201df16798bce794e20668673776bd0b164c5804f9d9c65b00e958840972eed507db6b9cd8a7a5eef1b0107c8ceb20
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZL:+w1lEKOpuYxiwkkgjAN8ZL
-
Gozi family
-
Blocklisted process makes network request
-