Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4915e13ff1642028c458dd576c44142f_JaffaCakes118

  • Size

    170KB

  • Sample

    240715-kty3vsyamr

  • MD5

    4915e13ff1642028c458dd576c44142f

  • SHA1

    f731af1b5acdcc376cab976eeeaa196646fdbcb9

  • SHA256

    ba18b133270ec5ac4f95db3657754e69a7c210e38d031d8839d6b6def5785a73

  • SHA512

    cabf6cfc707633afcb023e09f34945ace4a0f369ed968e9e20d5b66a1a63a54b69a4b4c75ef00a2124365ec8af2d92033d70450023d9d89de04b5f0d7ed4134a

  • SSDEEP

    3072:ALk395hYXJag6e5gEZDQQghyGl7b20cHPi+0XLTU8xlEl:AQq+eassQg0i2nq+0bTFlQ

Score
10/10

Malware Config

Targets

    • Target

      4915e13ff1642028c458dd576c44142f_JaffaCakes118

    • Size

      170KB

    • MD5

      4915e13ff1642028c458dd576c44142f

    • SHA1

      f731af1b5acdcc376cab976eeeaa196646fdbcb9

    • SHA256

      ba18b133270ec5ac4f95db3657754e69a7c210e38d031d8839d6b6def5785a73

    • SHA512

      cabf6cfc707633afcb023e09f34945ace4a0f369ed968e9e20d5b66a1a63a54b69a4b4c75ef00a2124365ec8af2d92033d70450023d9d89de04b5f0d7ed4134a

    • SSDEEP

      3072:ALk395hYXJag6e5gEZDQQghyGl7b20cHPi+0XLTU8xlEl:AQq+eassQg0i2nq+0bTFlQ

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Target

      2011522597.exe

    • Size

      100.2MB

    • MD5

      38a95a5d96d27b7a365f3a874288b5ca

    • SHA1

      3515820fbbac2dc3b97b698bf2bb3be3c8242843

    • SHA256

      4affdb8cd5ed942b2b0593878d7ab2c5658628c460df6cb4cccd945b16356240

    • SHA512

      83d989493d52f132fd08a5111b30e66296a9bb207ddbecca537bd60b0dcc5f8fadb0aa57f5b0c24a4a768a53540912cd2ceaf1173d08c66132d531a7a8c8db80

    • SSDEEP

      3072:KTeTY1km5WBqwP3fspQ/Xz7iasXHyC/hX6Axv3yUt7LEwjj8BPOI5s8DxOi:KiTtiWB0mL7teJ5Vp3yO5j4G7a

    Score
    6/10

MITRE ATT&CK Enterprise v15

Tasks