Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118

  • Size

    142KB

  • Sample

    240726-nest3svbkm

  • MD5

    73d45993a6f279e3d13f2e06a5f90437

  • SHA1

    dbc1bfccb5f56e9acaf94d917a180bda53a6985a

  • SHA256

    7001535b5f2b0b850bc9ffca376a9ed69b52e98afa052dfe730d26efcdd6f1ec

  • SHA512

    4e7c05f178c430e6d38d8b32d5d40896d7eb3bd9cb463c23a2fba68e4688a290b599c2fde5778ceffdc951062dfaa5bad3e510fad20bbd992a5839d4faf2b37e

  • SSDEEP

    3072:nix5XnHSNwVR6vW6nNQAUrTrogAaU/eTQyBnykmNsNl0WiuxzO/w5ukxM:niTXuKUn2X5A2tyfDWdpM

Malware Config

Targets

    • Target

      73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118

    • Size

      142KB

    • MD5

      73d45993a6f279e3d13f2e06a5f90437

    • SHA1

      dbc1bfccb5f56e9acaf94d917a180bda53a6985a

    • SHA256

      7001535b5f2b0b850bc9ffca376a9ed69b52e98afa052dfe730d26efcdd6f1ec

    • SHA512

      4e7c05f178c430e6d38d8b32d5d40896d7eb3bd9cb463c23a2fba68e4688a290b599c2fde5778ceffdc951062dfaa5bad3e510fad20bbd992a5839d4faf2b37e

    • SSDEEP

      3072:nix5XnHSNwVR6vW6nNQAUrTrogAaU/eTQyBnykmNsNl0WiuxzO/w5ukxM:niTXuKUn2X5A2tyfDWdpM

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks