Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b4e863360e1d14a175542e10f686a0b7_JaffaCakes118

  • Size

    255KB

  • Sample

    240821-y54dlssdqp

  • MD5

    b4e863360e1d14a175542e10f686a0b7

  • SHA1

    27264e7a52db255fc5b5b7d5907df57a6cf232e7

  • SHA256

    de76066ca8f6a8d700e840ef5c4e3601756b6a39bd993ba5fa30ed86089a00de

  • SHA512

    c9596e14af992ad1cd8639b89ad65f1bb269de48b01a52eedc406234dc6db99a3e327e6fdba8c948062bce6b044ebab78876de0908798a5e2628c6456dc7b2ef

  • SSDEEP

    6144:scpvcHas+QdNy4qTCqjTM5JsBOxzhoj2LOxnBcsed2:fpvjsTd0jTMskxqCaGsY

Score
7/10

Malware Config

Targets

    • Target

      b4e863360e1d14a175542e10f686a0b7_JaffaCakes118

    • Size

      255KB

    • MD5

      b4e863360e1d14a175542e10f686a0b7

    • SHA1

      27264e7a52db255fc5b5b7d5907df57a6cf232e7

    • SHA256

      de76066ca8f6a8d700e840ef5c4e3601756b6a39bd993ba5fa30ed86089a00de

    • SHA512

      c9596e14af992ad1cd8639b89ad65f1bb269de48b01a52eedc406234dc6db99a3e327e6fdba8c948062bce6b044ebab78876de0908798a5e2628c6456dc7b2ef

    • SSDEEP

      6144:scpvcHas+QdNy4qTCqjTM5JsBOxzhoj2LOxnBcsed2:fpvjsTd0jTMskxqCaGsY

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks