Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    72046c4ae25663e1036c7fa456d86ae5_JaffaCakes118

  • Size

    44KB

  • Sample

    240525-p46mxada48

  • MD5

    72046c4ae25663e1036c7fa456d86ae5

  • SHA1

    f03d8a72358676b0233d0d40f855169ab7c0ed28

  • SHA256

    0e45674b77ce89b9f7fb84bfa4fd9efae1056e3b8e1619266e7eae4d693ba090

  • SHA512

    5ee0218052682657764f40d65f41b21f95b186e643a20b5113575b388a26984271f96f1c9bdd1a0d073b636ae5d187228ce4f4920a591a23fcde6bcc562210e0

  • SSDEEP

    768:GPGkubVwHyysrrrrrrrZMCAWI+8nCaVNV/IPZ:GObiyFrrrrrrrZvAxvbjVUZ

Score
7/10
upx

Malware Config

Targets

    • Target

      72046c4ae25663e1036c7fa456d86ae5_JaffaCakes118

    • Size

      44KB

    • MD5

      72046c4ae25663e1036c7fa456d86ae5

    • SHA1

      f03d8a72358676b0233d0d40f855169ab7c0ed28

    • SHA256

      0e45674b77ce89b9f7fb84bfa4fd9efae1056e3b8e1619266e7eae4d693ba090

    • SHA512

      5ee0218052682657764f40d65f41b21f95b186e643a20b5113575b388a26984271f96f1c9bdd1a0d073b636ae5d187228ce4f4920a591a23fcde6bcc562210e0

    • SSDEEP

      768:GPGkubVwHyysrrrrrrrZMCAWI+8nCaVNV/IPZ:GObiyFrrrrrrrZvAxvbjVUZ

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks