Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3841fd589b5c6de1277443f8ac20880f_JaffaCakes118

  • Size

    64KB

  • Sample

    240711-jkvteawejr

  • MD5

    3841fd589b5c6de1277443f8ac20880f

  • SHA1

    21cb0e0faa3691cb70bb1aae8cfae1ff1d461e01

  • SHA256

    e6ea3c1ca861b57d28f485fffd9bb8dd08c4480ad4c993aeb50fd8576aceeab5

  • SHA512

    c24dc1865187a2f950080e915efb98af1534803d27c96905858cf81cd7f76ef825333124d91017f61ab07b1afb5868edfbb80c344b2638740475c7007a2c19c3

  • SSDEEP

    1536:ygVfaMlet+QcLAvQNgRizP4BC15p/RckwDU:vwMlbhLPK7Bg5p/LuU

Score
7/10

Malware Config

Targets

    • Target

      3841fd589b5c6de1277443f8ac20880f_JaffaCakes118

    • Size

      64KB

    • MD5

      3841fd589b5c6de1277443f8ac20880f

    • SHA1

      21cb0e0faa3691cb70bb1aae8cfae1ff1d461e01

    • SHA256

      e6ea3c1ca861b57d28f485fffd9bb8dd08c4480ad4c993aeb50fd8576aceeab5

    • SHA512

      c24dc1865187a2f950080e915efb98af1534803d27c96905858cf81cd7f76ef825333124d91017f61ab07b1afb5868edfbb80c344b2638740475c7007a2c19c3

    • SSDEEP

      1536:ygVfaMlet+QcLAvQNgRizP4BC15p/RckwDU:vwMlbhLPK7Bg5p/LuU

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks