Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1ad13db20d8eaaa6f0ecc05858124b9c_JaffaCakes118

  • Size

    49KB

  • Sample

    240701-lq894axgnq

  • MD5

    1ad13db20d8eaaa6f0ecc05858124b9c

  • SHA1

    ad233303f639a749c29f547d456af2e7bfc432a6

  • SHA256

    c38b06821567334d5ac4b5533087f78d4ca4b958afd399e4ac38cf254b592ada

  • SHA512

    442e5d440fdb3eeb354487586b88ea7bda100facb7082199a5d0689ccc9b0d9daf070d63b6e205dbc67ca93f70b3557e0a8bd553d934abbc330c852c633538a9

  • SSDEEP

    768:Mif9oOoP3nl5fJS767LF2NaBJdgwG8y3J7IAKHszsFW7W2srzmrblUlnuwF:n9ozvnffM67LF2NaRgwIpxK1TVOrJUpD

Score
9/10

Malware Config

Targets

    • Target

      1ad13db20d8eaaa6f0ecc05858124b9c_JaffaCakes118

    • Size

      49KB

    • MD5

      1ad13db20d8eaaa6f0ecc05858124b9c

    • SHA1

      ad233303f639a749c29f547d456af2e7bfc432a6

    • SHA256

      c38b06821567334d5ac4b5533087f78d4ca4b958afd399e4ac38cf254b592ada

    • SHA512

      442e5d440fdb3eeb354487586b88ea7bda100facb7082199a5d0689ccc9b0d9daf070d63b6e205dbc67ca93f70b3557e0a8bd553d934abbc330c852c633538a9

    • SSDEEP

      768:Mif9oOoP3nl5fJS767LF2NaBJdgwG8y3J7IAKHszsFW7W2srzmrblUlnuwF:n9ozvnffM67LF2NaRgwIpxK1TVOrJUpD

    Score
    9/10
    • Nirsoft

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks