Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8444369e0b1bb3745748fc291a36cd56_JaffaCakes118

  • Size

    988KB

  • Sample

    240810-bldbrayeln

  • MD5

    8444369e0b1bb3745748fc291a36cd56

  • SHA1

    cd20e28e634f848c38a0fe3d78aa519171189675

  • SHA256

    147d93096d541cfd1f5ba922c7eb3f114365874bfb6aaa3f886ff51061bcb179

  • SHA512

    3f1bb1764b419dab82c20c3fa04b64f6bcb40d69691445c2750a35de7e9ae53818fa8f95f0ec6a71f4af98d23975eab51240eab9787dc5c96f368a1c0d615a17

  • SSDEEP

    12288:X36cLlFLuQh9IHEOqeRkgYuIQQoNAHYZ/GEuGjPqR6S+Q7E94hkoBDP8:6cZFLfbLPeu3+QoKCPLqRhndhdDP8

Malware Config

Targets

    • Target

      8444369e0b1bb3745748fc291a36cd56_JaffaCakes118

    • Size

      988KB

    • MD5

      8444369e0b1bb3745748fc291a36cd56

    • SHA1

      cd20e28e634f848c38a0fe3d78aa519171189675

    • SHA256

      147d93096d541cfd1f5ba922c7eb3f114365874bfb6aaa3f886ff51061bcb179

    • SHA512

      3f1bb1764b419dab82c20c3fa04b64f6bcb40d69691445c2750a35de7e9ae53818fa8f95f0ec6a71f4af98d23975eab51240eab9787dc5c96f368a1c0d615a17

    • SSDEEP

      12288:X36cLlFLuQh9IHEOqeRkgYuIQQoNAHYZ/GEuGjPqR6S+Q7E94hkoBDP8:6cZFLfbLPeu3+QoKCPLqRhndhdDP8

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks