Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    84748d5572e1cf9d1e6383b9ed7fa5b7_JaffaCakes118

  • Size

    136KB

  • Sample

    240810-csp5kavhpb

  • MD5

    84748d5572e1cf9d1e6383b9ed7fa5b7

  • SHA1

    fe252f9f74d4ea559c78747d0a5db9bc9153378d

  • SHA256

    2492fbb8bda7a74846fc06bd151e418af0c3e8fbbb79aa3ba0b141e6a2d7cc0c

  • SHA512

    ab3b760979a398923a56e706639bb06db67fbebbd986fd9d02395a72a389c33bb34b45cb2d5514920694ec465da0a95c1e596d18f3f9fb2b0abfbb5d8042ab1d

  • SSDEEP

    3072:BmcgHVwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmH:Bmh1Qn7WbIqH0ybZBiOllyE5D+aVkjse

Malware Config

Targets

    • Target

      84748d5572e1cf9d1e6383b9ed7fa5b7_JaffaCakes118

    • Size

      136KB

    • MD5

      84748d5572e1cf9d1e6383b9ed7fa5b7

    • SHA1

      fe252f9f74d4ea559c78747d0a5db9bc9153378d

    • SHA256

      2492fbb8bda7a74846fc06bd151e418af0c3e8fbbb79aa3ba0b141e6a2d7cc0c

    • SHA512

      ab3b760979a398923a56e706639bb06db67fbebbd986fd9d02395a72a389c33bb34b45cb2d5514920694ec465da0a95c1e596d18f3f9fb2b0abfbb5d8042ab1d

    • SSDEEP

      3072:BmcgHVwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmH:Bmh1Qn7WbIqH0ybZBiOllyE5D+aVkjse

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks