Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118

  • Size

    109KB

  • Sample

    240810-lmxf5athmr

  • MD5

    859c3f171bcb3ed7d10007ec71f98082

  • SHA1

    b02a91d37762e485e02284ad13040522ea41471c

  • SHA256

    295f9b09881e8d978bc84aaebb18daa0a79f047d013921e9119d361fe4b5443d

  • SHA512

    9bff308eb1ad3e01d4d95bda21f8018398ccafd9d6f6c1d9b209f77a0598f84b2245870184dac8a2278c34f97af38c9d8e36506ae552b29baecc6a84a7e34391

  • SSDEEP

    3072:08jQ/bYnmYQus2HoUqrdT1x/QaiAjnLq845OKzNm:0IQ/b4nqbdB9Xnt45VRm

Malware Config

Targets

    • Target

      859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118

    • Size

      109KB

    • MD5

      859c3f171bcb3ed7d10007ec71f98082

    • SHA1

      b02a91d37762e485e02284ad13040522ea41471c

    • SHA256

      295f9b09881e8d978bc84aaebb18daa0a79f047d013921e9119d361fe4b5443d

    • SHA512

      9bff308eb1ad3e01d4d95bda21f8018398ccafd9d6f6c1d9b209f77a0598f84b2245870184dac8a2278c34f97af38c9d8e36506ae552b29baecc6a84a7e34391

    • SSDEEP

      3072:08jQ/bYnmYQus2HoUqrdT1x/QaiAjnLq845OKzNm:0IQ/b4nqbdB9Xnt45VRm

    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks