Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_6f07dfbd495540e57b9e6e4f51c37418
-
Size
232KB
-
Sample
250201-hc9f6avmcm
-
MD5
6f07dfbd495540e57b9e6e4f51c37418
-
SHA1
6c1d8a6b0582b0bad85c2e898d623761ac498619
-
SHA256
6d0815c6fa0f8e6097c3b34e767d669bb58ca4d0f2acdca5072bb1bc3a42bd62
-
SHA512
ccb6fdbc9f45127f34111718f3abdd5f92eba67eb19b78d20c0d2cc76388851bcbe90a861cf3d5e600cf7975d11573190e176c9bc8c5e782e4260cf09a6f665d
-
SSDEEP
3072:NCuoFkaxM5IYitIQg5VM/l74cuoutCSlAgnBkl7KVN0Kr7cculWOziuqNh6OU8nn:NCjFkcMajH0VM/lWoSCyHQTIeg71Z
Behavioral task
behavioral1
Sample
JaffaCakes118_6f07dfbd495540e57b9e6e4f51c37418.exe
Resource
win7-20241010-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
JaffaCakes118_6f07dfbd495540e57b9e6e4f51c37418
-
Size
232KB
-
MD5
6f07dfbd495540e57b9e6e4f51c37418
-
SHA1
6c1d8a6b0582b0bad85c2e898d623761ac498619
-
SHA256
6d0815c6fa0f8e6097c3b34e767d669bb58ca4d0f2acdca5072bb1bc3a42bd62
-
SHA512
ccb6fdbc9f45127f34111718f3abdd5f92eba67eb19b78d20c0d2cc76388851bcbe90a861cf3d5e600cf7975d11573190e176c9bc8c5e782e4260cf09a6f665d
-
SSDEEP
3072:NCuoFkaxM5IYitIQg5VM/l74cuoutCSlAgnBkl7KVN0Kr7cculWOziuqNh6OU8nn:NCjFkcMajH0VM/lWoSCyHQTIeg71Z
-
Sality family
-
Windows security bypass
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Windows security modification
-