Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_4f70c14120ebd5314e90a1ab2b236b2d
-
Size
710KB
-
Sample
250128-z647za1rcs
-
MD5
4f70c14120ebd5314e90a1ab2b236b2d
-
SHA1
28d588f0389ebb1ec45cfb99561ddbeaa88637a1
-
SHA256
6502f8146ef1622aea845d8969ea5fbd775f6521db877b03891bea2d6b06ffd5
-
SHA512
2f18bca1776f92c0d823cc59aeb240476d794cd79091a1b47c21455bb1a62bba6aa84cd2e5f34fba01429e11b37512719d7836d581243c5c7c4936b84eebc2e6
-
SSDEEP
12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZlFc:iM5j8Z3aKHx5r+TuxX+IwffFZlFc
Behavioral task
behavioral1
Sample
JaffaCakes118_4f70c14120ebd5314e90a1ab2b236b2d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4f70c14120ebd5314e90a1ab2b236b2d.exe
Resource
win10v2004-20250129-en
Malware Config
Targets
-
-
Target
JaffaCakes118_4f70c14120ebd5314e90a1ab2b236b2d
-
Size
710KB
-
MD5
4f70c14120ebd5314e90a1ab2b236b2d
-
SHA1
28d588f0389ebb1ec45cfb99561ddbeaa88637a1
-
SHA256
6502f8146ef1622aea845d8969ea5fbd775f6521db877b03891bea2d6b06ffd5
-
SHA512
2f18bca1776f92c0d823cc59aeb240476d794cd79091a1b47c21455bb1a62bba6aa84cd2e5f34fba01429e11b37512719d7836d581243c5c7c4936b84eebc2e6
-
SSDEEP
12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZlFc:iM5j8Z3aKHx5r+TuxX+IwffFZlFc
Score10/10-
Gh0st RAT payload
-
Gh0strat family
-
Executes dropped EXE
-
Adds Run key to start application
-