Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1ae254ae9746c05fd18315acdf622d17_JaffaCakes118

  • Size

    17KB

  • Sample

    240329-g5k4labe5x

  • MD5

    1ae254ae9746c05fd18315acdf622d17

  • SHA1

    d5cbfe3b44847bbba610065397d14db3608d36dd

  • SHA256

    a75d096cdff5c1836caadd55a57dbcec086babede90813a0f310f10a9d623096

  • SHA512

    89c5c1d19cc1a5f7ad71d7c335044fd8c8dbc86f3e0a0c1028be897a47b7412f80c75a4389e3d09cc0ce02985643861f13b9996966f8535acb0593aac090bbf1

  • SSDEEP

    384:6FUpZ10OcmZO2Zp+Nye8pqrmub8TyztsDN:66R0OoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      1ae254ae9746c05fd18315acdf622d17_JaffaCakes118

    • Size

      17KB

    • MD5

      1ae254ae9746c05fd18315acdf622d17

    • SHA1

      d5cbfe3b44847bbba610065397d14db3608d36dd

    • SHA256

      a75d096cdff5c1836caadd55a57dbcec086babede90813a0f310f10a9d623096

    • SHA512

      89c5c1d19cc1a5f7ad71d7c335044fd8c8dbc86f3e0a0c1028be897a47b7412f80c75a4389e3d09cc0ce02985643861f13b9996966f8535acb0593aac090bbf1

    • SSDEEP

      384:6FUpZ10OcmZO2Zp+Nye8pqrmub8TyztsDN:66R0OoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks