Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118

  • Size

    667KB

  • Sample

    240516-bhjz5adc8v

  • MD5

    48e1bce53c5a67ba932e14a2ff2c581d

  • SHA1

    19e4d21efeacbd608883a10d3acb0489b2b4c84f

  • SHA256

    046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55

  • SHA512

    5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c

  • SSDEEP

    12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x

Score
9/10

Malware Config

Targets

    • Target

      48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118

    • Size

      667KB

    • MD5

      48e1bce53c5a67ba932e14a2ff2c581d

    • SHA1

      19e4d21efeacbd608883a10d3acb0489b2b4c84f

    • SHA256

      046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55

    • SHA512

      5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c

    • SSDEEP

      12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.