Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2da95afc1df937edf2c441579c7e8eed_JaffaCakes118

  • Size

    250KB

  • Sample

    240708-yz3j5ayglf

  • MD5

    2da95afc1df937edf2c441579c7e8eed

  • SHA1

    1a5b0a5389dc64259a79353e96bff26ef1f00763

  • SHA256

    d2d5fb1d5c83cc02bfd7aee35098b50c84f64142d3399fcd6ddc5f2b91e405fd

  • SHA512

    8a7e4196411287ad5353a65dc10249348b13c57f091d1cbc461c08ac67dd01742023c2dafaab5da6b46a54f9aa0869965fd123717d8b61f9c89e2acf0d9ddb1d

  • SSDEEP

    6144:WhieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:TeKrJJuf86AYcwoaoSbr

Malware Config

Targets

    • Target

      2da95afc1df937edf2c441579c7e8eed_JaffaCakes118

    • Size

      250KB

    • MD5

      2da95afc1df937edf2c441579c7e8eed

    • SHA1

      1a5b0a5389dc64259a79353e96bff26ef1f00763

    • SHA256

      d2d5fb1d5c83cc02bfd7aee35098b50c84f64142d3399fcd6ddc5f2b91e405fd

    • SHA512

      8a7e4196411287ad5353a65dc10249348b13c57f091d1cbc461c08ac67dd01742023c2dafaab5da6b46a54f9aa0869965fd123717d8b61f9c89e2acf0d9ddb1d

    • SSDEEP

      6144:WhieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:TeKrJJuf86AYcwoaoSbr

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks