Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b26101dcd4ca89e3221f1fddd27c5a3_JaffaCakes118

  • Size

    20KB

  • Sample

    240811-t9darsxgpq

  • MD5

    8b26101dcd4ca89e3221f1fddd27c5a3

  • SHA1

    f215ce5cde9eb0f4566f2bafa7c5dc5813f8b13d

  • SHA256

    f11143a9ec5060136d0f3dde69e0de94a1b013e6cb6790bdddea75898b3bfed3

  • SHA512

    adf11d576980982cd1f71d115a2036d559d8667d65e4509e105f35a568f1d9ecdaf35245b5dc3458a67567378aadd3be1ac0bef048bf6aed8bec8545f640f520

  • SSDEEP

    384:sjHpLawENkMcT3dblG3ijwJk70V8OEdojDJb640meMFeWvwWd:6LaTNkJT3dbIyjwJk70V8dUY4qIv

Malware Config

Targets

    • Target

      8b26101dcd4ca89e3221f1fddd27c5a3_JaffaCakes118

    • Size

      20KB

    • MD5

      8b26101dcd4ca89e3221f1fddd27c5a3

    • SHA1

      f215ce5cde9eb0f4566f2bafa7c5dc5813f8b13d

    • SHA256

      f11143a9ec5060136d0f3dde69e0de94a1b013e6cb6790bdddea75898b3bfed3

    • SHA512

      adf11d576980982cd1f71d115a2036d559d8667d65e4509e105f35a568f1d9ecdaf35245b5dc3458a67567378aadd3be1ac0bef048bf6aed8bec8545f640f520

    • SSDEEP

      384:sjHpLawENkMcT3dblG3ijwJk70V8OEdojDJb640meMFeWvwWd:6LaTNkJT3dbIyjwJk70V8dUY4qIv

    • Server Software Component: Terminal Services DLL

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks