Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8329e89dbada1a981dca28cd67dd1a2e_JaffaCakes118

  • Size

    78KB

  • Sample

    240802-fwkwssxfpl

  • MD5

    8329e89dbada1a981dca28cd67dd1a2e

  • SHA1

    9f3939a3d71feeebc7f028c0f1dc0c8accf034db

  • SHA256

    138c555d42084b20aeffe0f8bc097b440e581840a4e897c23b28f146f2aa86e6

  • SHA512

    8922ebc24bc473a2c962972984335d03efc9c98910ba00e3302bdf9c70b7400776f1f602990af014e5c8d1296ec5074e7bacd98a3ff91f953c9b83bffe013287

  • SSDEEP

    1536:BM+hZsshR8/SaP3o0zbDyRatLMXhOoh6k1BKOOcLm6DX047HBTl9W:OEZssXA3ZyRatC6kSvohTl9W

Malware Config

Targets

    • Target

      8329e89dbada1a981dca28cd67dd1a2e_JaffaCakes118

    • Size

      78KB

    • MD5

      8329e89dbada1a981dca28cd67dd1a2e

    • SHA1

      9f3939a3d71feeebc7f028c0f1dc0c8accf034db

    • SHA256

      138c555d42084b20aeffe0f8bc097b440e581840a4e897c23b28f146f2aa86e6

    • SHA512

      8922ebc24bc473a2c962972984335d03efc9c98910ba00e3302bdf9c70b7400776f1f602990af014e5c8d1296ec5074e7bacd98a3ff91f953c9b83bffe013287

    • SSDEEP

      1536:BM+hZsshR8/SaP3o0zbDyRatLMXhOoh6k1BKOOcLm6DX047HBTl9W:OEZssXA3ZyRatC6kSvohTl9W

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks