Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    aa165c856b3bc7c3e331117d655ccbee_JaffaCakes118

  • Size

    116KB

  • Sample

    240819-h4qs5athjq

  • MD5

    aa165c856b3bc7c3e331117d655ccbee

  • SHA1

    3e36e6220b9f2bed5912706ddf9424f87e0c321e

  • SHA256

    ce4fc27a6d12c2258d8255a103eb6c296430a62385ece1b1fee42ec1396be92e

  • SHA512

    29ab13206e79282b6babb4b5721bf78b3e81c29c19f5d8f72fbf83bc808b8751faa2b21d432386af0a4180ce72181294788463c0332b45bbdba748be8a58e0c9

  • SSDEEP

    1536:A+cIRG3cyfCapmE5zkons4MBikY+msHH0o4vwo3L2YRTB6m8AJ05:AF4M6dE5zkPBir+miUoUEYRTB6ZYQ

Malware Config

Targets

    • Target

      aa165c856b3bc7c3e331117d655ccbee_JaffaCakes118

    • Size

      116KB

    • MD5

      aa165c856b3bc7c3e331117d655ccbee

    • SHA1

      3e36e6220b9f2bed5912706ddf9424f87e0c321e

    • SHA256

      ce4fc27a6d12c2258d8255a103eb6c296430a62385ece1b1fee42ec1396be92e

    • SHA512

      29ab13206e79282b6babb4b5721bf78b3e81c29c19f5d8f72fbf83bc808b8751faa2b21d432386af0a4180ce72181294788463c0332b45bbdba748be8a58e0c9

    • SSDEEP

      1536:A+cIRG3cyfCapmE5zkons4MBikY+msHH0o4vwo3L2YRTB6m8AJ05:AF4M6dE5zkPBir+miUoUEYRTB6ZYQ

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks