Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_e26702ccef04257666a04cf2ba0af070
-
Size
415KB
-
Sample
250110-my4v1ssmcx
-
MD5
e26702ccef04257666a04cf2ba0af070
-
SHA1
479206ed455073dcb28b0735dc8c57d3e7b5ed41
-
SHA256
70455d2c4e2de40fc7b2b389662827dafcd09c2594f7e9028bfbd15355dd52c6
-
SHA512
870270dad7d12cc34a383c0dfe83d771d2d38a0d7425112ac14d1bd2c4637ecbd2630ff17b5f6b4086a4dc8f6d6fa96834f4c0f28bc8194cde4b9a4da4e3eeeb
-
SSDEEP
6144:4YvqOYMZojpJA9P1Cx4AJZA6n8IeVHdlb5q5S3/:tvwMZ+A9Pi4YNeVHdlQE3/
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e26702ccef04257666a04cf2ba0af070.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
kpbe
zlhjx.com
night.solutions
atasteofcal.com
hariommobile.com
bunkerexotics.com
beritaindo.online
nguoidao.online
grenaliacikinihotel.xyz
danielfehrle.com
bitracks56.com
qubitsolana.com
klw1.com
imprimiruncalendario.com
fightfigures.com
kwkteam.com
roofingcaulk.com
nibawei.com
jeju-led.com
claridadoftalmo.net
angeltaxi.net
vip26.store
5ai57.com
simpfytech.com
michaelcannonphotography.com
exquisitejews.com
reubosu.net
quantuminstore.com
albedocoin.com
vasylife.com
daulim.com
polliticalwire.com
ksdollhouse.com
northlake35logisticspark.com
palisadestahoerentals.com
bi-tech.biz
globalitinfra.com
atarashiisekai.xyz
fatima2021.com
andersadali.one
pariwaranews.com
bjmxcm.com
324171.com
divineluxmedia.com
nabdalshree.com
infocom.management
blackpotion-sa.com
pemcogroupinc.com
carmechaniconline.com
uperionorthamerica.com
paginasweblaguna.com
yoo-tech.com
partyweardressforwomen.com
laycacademics.com
luonike123.com
mind2soul.com
ff4cuno43.xyz
chinanue.com
camsinked.com
3ntrenos.com
bdqimeng88.top
jiuhhj.xyz
hiddentrends.net
wheremap.net
terrierujkqsx.xyz
tillthespire.com
Targets
-
-
Target
JaffaCakes118_e26702ccef04257666a04cf2ba0af070
-
Size
415KB
-
MD5
e26702ccef04257666a04cf2ba0af070
-
SHA1
479206ed455073dcb28b0735dc8c57d3e7b5ed41
-
SHA256
70455d2c4e2de40fc7b2b389662827dafcd09c2594f7e9028bfbd15355dd52c6
-
SHA512
870270dad7d12cc34a383c0dfe83d771d2d38a0d7425112ac14d1bd2c4637ecbd2630ff17b5f6b4086a4dc8f6d6fa96834f4c0f28bc8194cde4b9a4da4e3eeeb
-
SSDEEP
6144:4YvqOYMZojpJA9P1Cx4AJZA6n8IeVHdlb5q5S3/:tvwMZ+A9Pi4YNeVHdlQE3/
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-