Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    afa862db683b6b7198665bf204d171e8_JaffaCakes118

  • Size

    40KB

  • Sample

    240820-r7ysksxhjc

  • MD5

    afa862db683b6b7198665bf204d171e8

  • SHA1

    36cc5bca1da3be744c0a5fc765e76257dbdffdec

  • SHA256

    f91b63543a21e56c1143b69c34844e52bbae0bb34d535acbff2ebad5e3cac43e

  • SHA512

    a3ba3de94232bcf15bb044b38bb90b4c423a9e57518bbe5901677962dd67660c1e743173cdf340d6c4f6b340ae9db3222ef65c06d9580856d1e921d2af0f5dc4

  • SSDEEP

    768:6sltaNBlzZwDM/iScPFIJfstmbrzRyzBwbVRHkKk5PwIWC9gUSWD:7lteJwDM/iSbtumbrFyzBwbVREPljvSa

Malware Config

Targets

    • Target

      afa862db683b6b7198665bf204d171e8_JaffaCakes118

    • Size

      40KB

    • MD5

      afa862db683b6b7198665bf204d171e8

    • SHA1

      36cc5bca1da3be744c0a5fc765e76257dbdffdec

    • SHA256

      f91b63543a21e56c1143b69c34844e52bbae0bb34d535acbff2ebad5e3cac43e

    • SHA512

      a3ba3de94232bcf15bb044b38bb90b4c423a9e57518bbe5901677962dd67660c1e743173cdf340d6c4f6b340ae9db3222ef65c06d9580856d1e921d2af0f5dc4

    • SSDEEP

      768:6sltaNBlzZwDM/iScPFIJfstmbrzRyzBwbVRHkKk5PwIWC9gUSWD:7lteJwDM/iSbtumbrFyzBwbVREPljvSa

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks