Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    77cb0d6f9c76924961fc32d04b3089ed_JaffaCakes118

  • Size

    331KB

  • Sample

    240727-l7npqatbpl

  • MD5

    77cb0d6f9c76924961fc32d04b3089ed

  • SHA1

    6207ad957f9dde490058463abc5b4cf264fea6fa

  • SHA256

    f3c916e44f9c796c5830fe9233b314b3ceec5f44ff17ecdb2483ba604c4a08e4

  • SHA512

    eba4d80a8a7bfa025b772bd36498d0e65c109b9ef5dda673abbb3c0d5c3642703ec61007e3679943d6d65b86d4814afdae90376bb23b3afa2096d026eaf3575e

  • SSDEEP

    6144:oWSrvfOmPuBtJfCb7mcFiZCejHiEIt3qmcE4tx9sTsjvudsz3:odf/PuBjCb7mUiZCeji7zQ9sc

Malware Config

Targets

    • Target

      77cb0d6f9c76924961fc32d04b3089ed_JaffaCakes118

    • Size

      331KB

    • MD5

      77cb0d6f9c76924961fc32d04b3089ed

    • SHA1

      6207ad957f9dde490058463abc5b4cf264fea6fa

    • SHA256

      f3c916e44f9c796c5830fe9233b314b3ceec5f44ff17ecdb2483ba604c4a08e4

    • SHA512

      eba4d80a8a7bfa025b772bd36498d0e65c109b9ef5dda673abbb3c0d5c3642703ec61007e3679943d6d65b86d4814afdae90376bb23b3afa2096d026eaf3575e

    • SSDEEP

      6144:oWSrvfOmPuBtJfCb7mcFiZCejHiEIt3qmcE4tx9sTsjvudsz3:odf/PuBjCb7mUiZCeji7zQ9sc

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks