Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4bdef79bc1f1709049f3f4e1aefa9d3a_JaffaCakes118

  • Size

    17KB

  • Sample

    240715-3ge4bsxclh

  • MD5

    4bdef79bc1f1709049f3f4e1aefa9d3a

  • SHA1

    1f923501094b234ef59596adab187874f734e882

  • SHA256

    160d68f65b5ab4690993398f63a3407d113f5ce70e35aee6a44e1b36b637047c

  • SHA512

    30a210ba33ef4eb6bc32cb50d93d2b46376d90b0ff90cebfa00873721e6fe45efdc7f576af18e7c1d57d3032006d3e5ddc59df62fa9020fe19e1201c9a8e07c9

  • SSDEEP

    384:Ny+26QIVmapXo0rridertW0w0PBVrivaa2zFAVhh:NLFQI/YirCkwGV2yFzFi

Score
7/10

Malware Config

Targets

    • Target

      4bdef79bc1f1709049f3f4e1aefa9d3a_JaffaCakes118

    • Size

      17KB

    • MD5

      4bdef79bc1f1709049f3f4e1aefa9d3a

    • SHA1

      1f923501094b234ef59596adab187874f734e882

    • SHA256

      160d68f65b5ab4690993398f63a3407d113f5ce70e35aee6a44e1b36b637047c

    • SHA512

      30a210ba33ef4eb6bc32cb50d93d2b46376d90b0ff90cebfa00873721e6fe45efdc7f576af18e7c1d57d3032006d3e5ddc59df62fa9020fe19e1201c9a8e07c9

    • SSDEEP

      384:Ny+26QIVmapXo0rridertW0w0PBVrivaa2zFAVhh:NLFQI/YirCkwGV2yFzFi

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks