Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e2b70eca28d9bbf6c2281b6d6d2139d0_JaffaCakes118

  • Size

    124KB

  • Sample

    240406-rhtgkaca9y

  • MD5

    e2b70eca28d9bbf6c2281b6d6d2139d0

  • SHA1

    9770b3f63e804db13e0b78a81ac86b38251d8773

  • SHA256

    38cfaec4ee27dc45fe806bd29c785a7c9a9f9a29092f621c58eb3046732ee789

  • SHA512

    d6ad7d6bad581cc3d317ddf64bd76ec3ca1a8f0a786601610f342fdd905159389b5c5bf41527084fa2fac153a8e2c7b1bf9d86d5a7ae22a364361d256cff9710

  • SSDEEP

    1536:GvtkjYTQoU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeUPNeG0h/:KkjPoU0GgAT9xI

Score
10/10

Malware Config

Targets

    • Target

      e2b70eca28d9bbf6c2281b6d6d2139d0_JaffaCakes118

    • Size

      124KB

    • MD5

      e2b70eca28d9bbf6c2281b6d6d2139d0

    • SHA1

      9770b3f63e804db13e0b78a81ac86b38251d8773

    • SHA256

      38cfaec4ee27dc45fe806bd29c785a7c9a9f9a29092f621c58eb3046732ee789

    • SHA512

      d6ad7d6bad581cc3d317ddf64bd76ec3ca1a8f0a786601610f342fdd905159389b5c5bf41527084fa2fac153a8e2c7b1bf9d86d5a7ae22a364361d256cff9710

    • SSDEEP

      1536:GvtkjYTQoU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeUPNeG0h/:KkjPoU0GgAT9xI

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks