Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2df4da0aca8f59e9d8c3f99f81d69543_JaffaCakes118

  • Size

    117KB

  • Sample

    240708-1vvptstbrf

  • MD5

    2df4da0aca8f59e9d8c3f99f81d69543

  • SHA1

    0e5da5876a2b37e515850ead250b26161371582b

  • SHA256

    dac1b115a7edce7a5031b0ec0e6ee136bf624631021dec8fd222f8e8e82a7504

  • SHA512

    8e8e441524c13a4843fd51b1585adec155ba9e728fa8a1c3a6c03db06fabd802a93b4cce05a321e313632793e1243e4e74a57e3ec2c38fccdc784999aee9b167

  • SSDEEP

    3072:yatj024ZwnfISBtkk/1otj/MB3QoQdz6lub1Y+mbv:yCAifISBtkk/1a/MBOdz6obQbv

Malware Config

Targets

    • Target

      2df4da0aca8f59e9d8c3f99f81d69543_JaffaCakes118

    • Size

      117KB

    • MD5

      2df4da0aca8f59e9d8c3f99f81d69543

    • SHA1

      0e5da5876a2b37e515850ead250b26161371582b

    • SHA256

      dac1b115a7edce7a5031b0ec0e6ee136bf624631021dec8fd222f8e8e82a7504

    • SHA512

      8e8e441524c13a4843fd51b1585adec155ba9e728fa8a1c3a6c03db06fabd802a93b4cce05a321e313632793e1243e4e74a57e3ec2c38fccdc784999aee9b167

    • SSDEEP

      3072:yatj024ZwnfISBtkk/1otj/MB3QoQdz6lub1Y+mbv:yCAifISBtkk/1a/MBOdz6obQbv

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks