Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118

  • Size

    5.6MB

  • Sample

    240818-e7jbnsycrl

  • MD5

    a5678f3a7ee0903dc9d4fcb52821ef04

  • SHA1

    b1819407654eb379f1681c2037f9d70b1e93eb77

  • SHA256

    ffc0a242e73653e7b487be3f970538cc05bab897ebc53488aa7243a92938e9e5

  • SHA512

    db268a743e520cc9c7aebc46f0105c821133dd1e69670d9501b24f76d3d512cd23c67584eb8bc4d64bf0a4c267e019e44606cca12c96ce90359ef47f2ebfeb39

  • SSDEEP

    49152:H5udYaK8MJC9e8FXvMon4eFXH2H+o/Hw9wtaddtJAqsJnDpFDBUq6SRLGTnA:YdYaK8+C9

Malware Config

Targets

    • Target

      a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118

    • Size

      5.6MB

    • MD5

      a5678f3a7ee0903dc9d4fcb52821ef04

    • SHA1

      b1819407654eb379f1681c2037f9d70b1e93eb77

    • SHA256

      ffc0a242e73653e7b487be3f970538cc05bab897ebc53488aa7243a92938e9e5

    • SHA512

      db268a743e520cc9c7aebc46f0105c821133dd1e69670d9501b24f76d3d512cd23c67584eb8bc4d64bf0a4c267e019e44606cca12c96ce90359ef47f2ebfeb39

    • SSDEEP

      49152:H5udYaK8MJC9e8FXvMon4eFXH2H+o/Hw9wtaddtJAqsJnDpFDBUq6SRLGTnA:YdYaK8+C9

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks