Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0311b7364b1b1eed21aed5042f20d59c_JaffaCakes118

  • Size

    530KB

  • Sample

    240427-mrk5bsgg82

  • MD5

    0311b7364b1b1eed21aed5042f20d59c

  • SHA1

    a37ffd639e8fd795d4e93747b628b1acb712f651

  • SHA256

    94be3d2e1797585f39128ad9bce05b8d708a8fe66589cc4b3e81bbf2c15ceaad

  • SHA512

    5fe882d00f83556255a5781d2213eecff826393ccfcfe03a56dd43454b9e80c1685339429f6d9053b7213b9096422bd55700b1039960d451c004ca7945aa76b3

  • SSDEEP

    3072:5CaoAs101bol0xPTM7mRCAdJSSxPUkl3V4Vh19MQTCk/dN92sdNhavtrVdewnAxv:5qDAMl0xPTMiR9JSSxPUKundodH74

Score
7/10

Malware Config

Targets

    • Target

      0311b7364b1b1eed21aed5042f20d59c_JaffaCakes118

    • Size

      530KB

    • MD5

      0311b7364b1b1eed21aed5042f20d59c

    • SHA1

      a37ffd639e8fd795d4e93747b628b1acb712f651

    • SHA256

      94be3d2e1797585f39128ad9bce05b8d708a8fe66589cc4b3e81bbf2c15ceaad

    • SHA512

      5fe882d00f83556255a5781d2213eecff826393ccfcfe03a56dd43454b9e80c1685339429f6d9053b7213b9096422bd55700b1039960d451c004ca7945aa76b3

    • SSDEEP

      3072:5CaoAs101bol0xPTM7mRCAdJSSxPUkl3V4Vh19MQTCk/dN92sdNhavtrVdewnAxv:5qDAMl0xPTMiR9JSSxPUKundodH74

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks