Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fa5f8bef489cf87404077b8437f700fa_JaffaCakes118

  • Size

    762KB

  • Sample

    240419-qhzg5sec8t

  • MD5

    fa5f8bef489cf87404077b8437f700fa

  • SHA1

    a5412255ebc637165e2d7528dfc56350324769cb

  • SHA256

    b4ae582fb61848d83e1e55dcc4925ea7788dba0c940c5a21157de6566342f06a

  • SHA512

    90f4ce55fab0369d3d5b43888d6ddf2c0f00408dcfe52476b045510fbd0f12400170b0260611086e826464a17d9fbe06679e0a47203af62152f13191feaff0a3

  • SSDEEP

    12288:qtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnR:qtDltItNW7pjDlpt5XY/2TkXKza/29V

Score
5/10

Malware Config

Targets

    • Target

      fa5f8bef489cf87404077b8437f700fa_JaffaCakes118

    • Size

      762KB

    • MD5

      fa5f8bef489cf87404077b8437f700fa

    • SHA1

      a5412255ebc637165e2d7528dfc56350324769cb

    • SHA256

      b4ae582fb61848d83e1e55dcc4925ea7788dba0c940c5a21157de6566342f06a

    • SHA512

      90f4ce55fab0369d3d5b43888d6ddf2c0f00408dcfe52476b045510fbd0f12400170b0260611086e826464a17d9fbe06679e0a47203af62152f13191feaff0a3

    • SSDEEP

      12288:qtobirltpeTtNXmLFhppAEDlPRCdc5XY/ouP9Tk284UhzSX65rdAmawrm29fPTnR:qtDltItNW7pjDlpt5XY/2TkXKza/29V

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      $_3_

    • Size

      1.7MB

    • MD5

      d4c16982f8a834bc0f8028b45c3ae543

    • SHA1

      9d9cec9af8f23a23521e20d48d9af1024663a4a7

    • SHA256

      932badf8ce27381bd595c9d861d7f7142fe98f233a893a2003a5f5e5ec163b3b

    • SHA512

      c94b8d978afac107c08a5405cf9510e48d4bcf1284292eee1d08898f1c7a43a83a9655dc4d85d27d3b825e45a8f136c7beb71405fab94bb5e2437b7c4ad44b5c

    • SSDEEP

      49152:n7mrmYPoEHVGTWFkO4ITVpSuEqM/vrM3rA3SuN5:km2Z12WFYFVf

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks