Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7612a94a3405a1138fde444018f062e8_JaffaCakes118

  • Size

    904KB

  • Sample

    240726-2vbgmatanf

  • MD5

    7612a94a3405a1138fde444018f062e8

  • SHA1

    bea38dc13156805bfa1f845d12dd635de7f2c40d

  • SHA256

    605c30e41e7547abe5272a51f8e582c77b75f1b1ebbeb4f6617966ebe0111d1a

  • SHA512

    9621342a7512e799411603fbbf989f414b32c285c0294486f18f8fc839f0c84025c3434c74a751d6b6f110ac1063e591092e4b258abae81e335a58d8e7561fc9

  • SSDEEP

    24576:BZcNqxXLtaWWeaVcUhQOaaM2K8l5dgdsLcvp6o6cBMqp:I8JLsW5atzxlPgdsLCv

Malware Config

Targets

    • Target

      7612a94a3405a1138fde444018f062e8_JaffaCakes118

    • Size

      904KB

    • MD5

      7612a94a3405a1138fde444018f062e8

    • SHA1

      bea38dc13156805bfa1f845d12dd635de7f2c40d

    • SHA256

      605c30e41e7547abe5272a51f8e582c77b75f1b1ebbeb4f6617966ebe0111d1a

    • SHA512

      9621342a7512e799411603fbbf989f414b32c285c0294486f18f8fc839f0c84025c3434c74a751d6b6f110ac1063e591092e4b258abae81e335a58d8e7561fc9

    • SSDEEP

      24576:BZcNqxXLtaWWeaVcUhQOaaM2K8l5dgdsLcvp6o6cBMqp:I8JLsW5atzxlPgdsLCv

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks