Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1aa20ecb76fcc8e6c60519399431d64e_JaffaCakes118

  • Size

    216KB

  • Sample

    240701-kjj6ysvfnq

  • MD5

    1aa20ecb76fcc8e6c60519399431d64e

  • SHA1

    12de2b3bcff8fe6c066e64e1532af6966b8f566a

  • SHA256

    adf2f7ea316706831dfd6c2fce9f8df6b28316df568ceb9b91747dbb8c4083b3

  • SHA512

    9ed64c9a61a72473f9375146bc9cb0ec905f93bc52996ccf60c2f4ffd5c6fd8535f93bcd163a67fdad3e9aafbd0a24f924a797b3caea1f247241d0c4fea6e6de

  • SSDEEP

    3072:92963fKwcyAHtyU472ydQs1Vsd0WpPGFobtkBdk3ENwz:XtR6EUEQs1VseWpPGFobC3k3ENi

Score
10/10

Malware Config

Targets

    • Target

      1aa20ecb76fcc8e6c60519399431d64e_JaffaCakes118

    • Size

      216KB

    • MD5

      1aa20ecb76fcc8e6c60519399431d64e

    • SHA1

      12de2b3bcff8fe6c066e64e1532af6966b8f566a

    • SHA256

      adf2f7ea316706831dfd6c2fce9f8df6b28316df568ceb9b91747dbb8c4083b3

    • SHA512

      9ed64c9a61a72473f9375146bc9cb0ec905f93bc52996ccf60c2f4ffd5c6fd8535f93bcd163a67fdad3e9aafbd0a24f924a797b3caea1f247241d0c4fea6e6de

    • SSDEEP

      3072:92963fKwcyAHtyU472ydQs1Vsd0WpPGFobtkBdk3ENwz:XtR6EUEQs1VseWpPGFobC3k3ENi

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks