Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118

  • Size

    24KB

  • Sample

    240819-gp6ela1dmm

  • MD5

    a9db6c03c9ddf1ca0308c40781c11f43

  • SHA1

    68cf505a3e033a3b863fe52b16fea2cf6347aa16

  • SHA256

    bf0b459c3c9d8a26636157fb8b9c693df0b75f7ded288ebafe8d6374853176fa

  • SHA512

    86562dd907d42da3c422ab7230f298bab68fe35669e828782b97e66a2d23a07fc41906fdf4d780443c5f5803067f6dae4a21ed6081cb67234b022e47dcabb2bd

  • SSDEEP

    192:teOtaGSJAeBqaVKwlf3e4gbZdH0dHRdHwdHPH1SdHB18GZCju11K7kvBPOnT3Uvb:MMGPVx3ehVqrmuJk2VvBR

Malware Config

Targets

    • Target

      a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118

    • Size

      24KB

    • MD5

      a9db6c03c9ddf1ca0308c40781c11f43

    • SHA1

      68cf505a3e033a3b863fe52b16fea2cf6347aa16

    • SHA256

      bf0b459c3c9d8a26636157fb8b9c693df0b75f7ded288ebafe8d6374853176fa

    • SHA512

      86562dd907d42da3c422ab7230f298bab68fe35669e828782b97e66a2d23a07fc41906fdf4d780443c5f5803067f6dae4a21ed6081cb67234b022e47dcabb2bd

    • SSDEEP

      192:teOtaGSJAeBqaVKwlf3e4gbZdH0dHRdHwdHPH1SdHB18GZCju11K7kvBPOnT3Uvb:MMGPVx3ehVqrmuJk2VvBR

    • Event Triggered Execution: Image File Execution Options Injection

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.