Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b20fe6f1290926e4989585a17dfa286e_JaffaCakes118

  • Size

    204KB

  • Sample

    240821-esttvstanl

  • MD5

    b20fe6f1290926e4989585a17dfa286e

  • SHA1

    6e836206b9620bcee980c85abae5afa88130ee99

  • SHA256

    3335d095286c22f429bb55560cf8174e07691b8d665adc0aad5f7d5fd80f2f67

  • SHA512

    b88ca671409c3e7f9f6a0d056f00df411de619026b6654768038091e31104176fb2fefeed709c531199f95ab64a4fe92219b39885c8abb969d4468f62990e764

  • SSDEEP

    6144:EJzIRemuz3sK84zD0ccAMZtg3nlaffCYWz8n:2IRemuz3sK84v0cRk+afaYWzG

Malware Config

Targets

    • Target

      b20fe6f1290926e4989585a17dfa286e_JaffaCakes118

    • Size

      204KB

    • MD5

      b20fe6f1290926e4989585a17dfa286e

    • SHA1

      6e836206b9620bcee980c85abae5afa88130ee99

    • SHA256

      3335d095286c22f429bb55560cf8174e07691b8d665adc0aad5f7d5fd80f2f67

    • SHA512

      b88ca671409c3e7f9f6a0d056f00df411de619026b6654768038091e31104176fb2fefeed709c531199f95ab64a4fe92219b39885c8abb969d4468f62990e764

    • SSDEEP

      6144:EJzIRemuz3sK84zD0ccAMZtg3nlaffCYWz8n:2IRemuz3sK84v0cRk+afaYWzG

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks