Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_d1f76ed4210b6bbbf232271b8b198133
-
Size
256KB
-
Sample
250109-zjkj2sspcm
-
MD5
d1f76ed4210b6bbbf232271b8b198133
-
SHA1
a8407cfa0da5ecffdfeeb22a824f4e9fa368249e
-
SHA256
6e025a1d72e2abfb9c0fb6c945d3fcdbe2124c5d68d8f5fb09b8389bc30f799e
-
SHA512
de396811bc499eb12b2f02d79262d0dc4962d8e96a260ba493a70883edf79261c540709b5f957bea853bd810ba1934a3c9ca623a10726d1648cb1bd4a7093138
-
SSDEEP
6144:wBlL/c4ANoQTYbc6xdeyRF4gBIDi0dlwSKSSiOHq0IpE7A:CebN/T0cIeQF4gBb0dlwSKv7Z7A
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d1f76ed4210b6bbbf232271b8b198133.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d1f76ed4210b6bbbf232271b8b198133.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/lcfqe.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/lcfqe.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
formbook
4.1
rv9n
olivia-grace.show
zhuwww.com
keiretsu.xyz
olidnh.space
searuleansec.com
2fastrepair.com
brooklynmetalroof.com
scodol.com
novaprint.pro
the-loaner.com
nextroundscap.com
zbwlggs.com
internetautodealer.com
xn--tornrealestate-ekb.com
yunjiuhuo.com
skandinaviskakryptobanken.com
coxivarag.rest
ophthalmologylab.com
zzzzgjcdbqnn98.net
doeful.com
beatthebank.fund
deposit-pulsa2021.xyz
uptownsecuritysystems.com
thegroveonglendale.com
destinationth.com
healthcareuninsured.com
longhang.xyz
ypxwwxjqcqhutyp.com
ip-15-235-90.net
rancholachiquita.com
macblog.xyz
skillsbazar.com
beatyup.com
academiapinto.com
myguagua.com
fto8y.com
ohioleads.net
paravocebrasil.com
thecanyonmanor.com
acu-bps.com
comunicaretresessanta.net
schwa-bingcorp.com
discountcouponcodes-jp.space
kufazo.online
metaverge.club
800car.online
brendanbaehr.com
garfieldtoken.net
secretfoldr.com
13itcasino.com
marketingatelier.net
computersslide.com
marcastudios.com
thestreetsoflondon.life
maintaintest.com
cronicasdebia.com
apm-app.com
sepulchral.xyz
lodha-project.com
theartofsoulwork.com
swimminglessonsshop.com
klarnabet.com
control-of-space.net
heliumathletic.com
cjspizza.net
Targets
-
-
Target
JaffaCakes118_d1f76ed4210b6bbbf232271b8b198133
-
Size
256KB
-
MD5
d1f76ed4210b6bbbf232271b8b198133
-
SHA1
a8407cfa0da5ecffdfeeb22a824f4e9fa368249e
-
SHA256
6e025a1d72e2abfb9c0fb6c945d3fcdbe2124c5d68d8f5fb09b8389bc30f799e
-
SHA512
de396811bc499eb12b2f02d79262d0dc4962d8e96a260ba493a70883edf79261c540709b5f957bea853bd810ba1934a3c9ca623a10726d1648cb1bd4a7093138
-
SSDEEP
6144:wBlL/c4ANoQTYbc6xdeyRF4gBIDi0dlwSKSSiOHq0IpE7A:CebN/T0cIeQF4gBb0dlwSKv7Z7A
-
Formbook family
-
Formbook payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/lcfqe.dll
-
Size
48KB
-
MD5
849b29a5363106f1ec41b2b6bfce6b6d
-
SHA1
bfdccdb25cbcf5bb55e42169f542513dd6881139
-
SHA256
e3dfe132ec3fcfcbb1146154212ba1b1c4221cea1b79cded3cab7fc65c3cc54b
-
SHA512
28d568102227e1e3c12ff91dff5a8dc1c119d8d21c062706f8a5e561da09b089c284feaa49040fbadc7e1ff911563c7fdd13866af67a1c8256cd44af312f5074
-
SSDEEP
768:Fg7dbS3GVz7e1MPkrtzs5tjUKH1KJpdxCBrhLxCKFU:Fg7+0z7e1IkRwjrHAvdwBr9xCK2
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-