Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac3e22af9883904be5064ba0ca4dfd2d_JaffaCakes118

  • Size

    72KB

  • Sample

    240819-x1ap3a1eqg

  • MD5

    ac3e22af9883904be5064ba0ca4dfd2d

  • SHA1

    79122b05eeda8d913a013f648ce3d5ce3c0fbc2c

  • SHA256

    5e1a5015faf7d12c0b6b3faf02e74ae3beaceb361956c98e4e461444d153a848

  • SHA512

    9355e05bd0c99145e32b953699d75561dabc07590a015487b681de6426ca83a373b428d75ec77d9d02eaa6c6a24f0dde4321ec5207d62b7681559ab4eb1d94fc

  • SSDEEP

    1536:/QjaW50oZqnB/UuPggZe94quIDIhZPyNCgh5R+xiXxrgxe:/Q/0oZgBdPM9BlIhI/RnxrB

Score
7/10

Malware Config

Targets

    • Target

      155绿色软件站.url

    • Size

      219B

    • MD5

      3a1f2a8a3ef08ae269517a69ea918b2c

    • SHA1

      7d2e6719702bc8472e045e010efa6ed3f7df4b5b

    • SHA256

      66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd

    • SHA512

      22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576

    Score
    1/10
    • Target

      右键显示隐藏系统文件.exe

    • Size

      414KB

    • MD5

      6d41ee8c4bd2b574b02a29ce0b023eb9

    • SHA1

      6357ac007742c6b8fc6c10eb303bf729af663ce9

    • SHA256

      9f6bb66ec52ebb6d52006955dc94399c51d192dbec076df269de0552593b12ce

    • SHA512

      e0732b54b4b4edcf35f1d99df9a7dddb9d6d1a91545be6657f55318e98f80ab5dbf7b0701b62c327be14e52bbe5b69b8117946deecbdd204ad3cb0fed5af3525

    • SSDEEP

      6144:aTfFDbRnOTrZc1JWGkTfFDbRnOTrZc1JFo7TfFDbRnOTrZc1JlBE:I5OG2GW5OGlo95OGFBE

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks