Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118

  • Size

    24KB

  • Sample

    240819-gp6ela1dmm

  • MD5

    a9db6c03c9ddf1ca0308c40781c11f43

  • SHA1

    68cf505a3e033a3b863fe52b16fea2cf6347aa16

  • SHA256

    bf0b459c3c9d8a26636157fb8b9c693df0b75f7ded288ebafe8d6374853176fa

  • SHA512

    86562dd907d42da3c422ab7230f298bab68fe35669e828782b97e66a2d23a07fc41906fdf4d780443c5f5803067f6dae4a21ed6081cb67234b022e47dcabb2bd

  • SSDEEP

    192:teOtaGSJAeBqaVKwlf3e4gbZdH0dHRdHwdHPH1SdHB18GZCju11K7kvBPOnT3Uvb:MMGPVx3ehVqrmuJk2VvBR

Malware Config

Targets

    • Target

      a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118

    • Size

      24KB

    • MD5

      a9db6c03c9ddf1ca0308c40781c11f43

    • SHA1

      68cf505a3e033a3b863fe52b16fea2cf6347aa16

    • SHA256

      bf0b459c3c9d8a26636157fb8b9c693df0b75f7ded288ebafe8d6374853176fa

    • SHA512

      86562dd907d42da3c422ab7230f298bab68fe35669e828782b97e66a2d23a07fc41906fdf4d780443c5f5803067f6dae4a21ed6081cb67234b022e47dcabb2bd

    • SSDEEP

      192:teOtaGSJAeBqaVKwlf3e4gbZdH0dHRdHwdHPH1SdHB18GZCju11K7kvBPOnT3Uvb:MMGPVx3ehVqrmuJk2VvBR

    • Event Triggered Execution: Image File Execution Options Injection

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks