Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fdbe6efb483f4c3268714f7e1c48db16_JaffaCakes118

  • Size

    66KB

  • Sample

    240420-1xdjbsbf5x

  • MD5

    fdbe6efb483f4c3268714f7e1c48db16

  • SHA1

    c02c0792e5202f064fee8132d2a9cb0b7402c206

  • SHA256

    6f32c86bd9eaa31a11b1b9b257ca20048e0ef15dcbbe04d6c0ef833824bfff89

  • SHA512

    2ca1dd136c2817c20f5ee9739c2096ed5e9d1c7bcabd8380b1760b543d52614cfa6a9abfb0ab26d59d293cbb5014d501d5663cadfdfd36c85cf05049c06f1e90

  • SSDEEP

    1536:T6XMEmINbEWsWfWjTBV3oLCHP/Aia9VTw6SFyVexqip:WXM6QWKTYWv/bac6Stqip

Score
8/10

Malware Config

Targets

    • Target

      fdbe6efb483f4c3268714f7e1c48db16_JaffaCakes118

    • Size

      66KB

    • MD5

      fdbe6efb483f4c3268714f7e1c48db16

    • SHA1

      c02c0792e5202f064fee8132d2a9cb0b7402c206

    • SHA256

      6f32c86bd9eaa31a11b1b9b257ca20048e0ef15dcbbe04d6c0ef833824bfff89

    • SHA512

      2ca1dd136c2817c20f5ee9739c2096ed5e9d1c7bcabd8380b1760b543d52614cfa6a9abfb0ab26d59d293cbb5014d501d5663cadfdfd36c85cf05049c06f1e90

    • SSDEEP

      1536:T6XMEmINbEWsWfWjTBV3oLCHP/Aia9VTw6SFyVexqip:WXM6QWKTYWv/bac6Stqip

    Score
    8/10
    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks