Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    70ef2c696b5c4619649cff99199175cb_JaffaCakes118

  • Size

    673KB

  • Sample

    240725-x92vxatckd

  • MD5

    70ef2c696b5c4619649cff99199175cb

  • SHA1

    8adea59a32374eb3472a901c8d616a3d3df3e92e

  • SHA256

    5cded815c3345397e14559301b62f9722af8d0bed5c414b218c465d352ec8c13

  • SHA512

    7247f7a235db16b2826f34cee91f4955505311db1ccf0e3b38710d94c31c265fbb0fc62b9b56fc537cdddb6a4951b82e79e5f9642bff77cc49482dea597cc906

  • SSDEEP

    12288:95NYhaZ88m6KTf2o6zaaoVbayAzGZnfG+84DpVg6l/tSHNm:95yhOiTf2rz0JwWxgs5

Malware Config

Targets

    • Target

      70ef2c696b5c4619649cff99199175cb_JaffaCakes118

    • Size

      673KB

    • MD5

      70ef2c696b5c4619649cff99199175cb

    • SHA1

      8adea59a32374eb3472a901c8d616a3d3df3e92e

    • SHA256

      5cded815c3345397e14559301b62f9722af8d0bed5c414b218c465d352ec8c13

    • SHA512

      7247f7a235db16b2826f34cee91f4955505311db1ccf0e3b38710d94c31c265fbb0fc62b9b56fc537cdddb6a4951b82e79e5f9642bff77cc49482dea597cc906

    • SSDEEP

      12288:95NYhaZ88m6KTf2o6zaaoVbayAzGZnfG+84DpVg6l/tSHNm:95yhOiTf2rz0JwWxgs5

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks