Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b7740b80e7e55c51122870c5b9bcc743_JaffaCakes118

  • Size

    704KB

  • Sample

    240822-nkcp2sxckq

  • MD5

    b7740b80e7e55c51122870c5b9bcc743

  • SHA1

    2047d1d0910dadfbc163f09192ffdb8bc8c1717e

  • SHA256

    2c04ee4cb87e9e0997b7572c12d34281375947f56927b766bf4ac25775521aac

  • SHA512

    98685f155e4ddf37bc49625b20fdc85a78f658b6ffd6300dc3ef3780e5171bde51e70ab2714e1b90972f2d4989661bf2af49a6b2e07fb13e1434bde6436c3414

  • SSDEEP

    12288:6qEqoY9oQsxB5FAYxl4hskilwg84Qx5guzunXMKobsETrKjMU4xO7KjMU4xO:6ZqRPsvchskilwgiMnXMRsQKjYQKjY

Malware Config

Targets

    • Target

      b7740b80e7e55c51122870c5b9bcc743_JaffaCakes118

    • Size

      704KB

    • MD5

      b7740b80e7e55c51122870c5b9bcc743

    • SHA1

      2047d1d0910dadfbc163f09192ffdb8bc8c1717e

    • SHA256

      2c04ee4cb87e9e0997b7572c12d34281375947f56927b766bf4ac25775521aac

    • SHA512

      98685f155e4ddf37bc49625b20fdc85a78f658b6ffd6300dc3ef3780e5171bde51e70ab2714e1b90972f2d4989661bf2af49a6b2e07fb13e1434bde6436c3414

    • SSDEEP

      12288:6qEqoY9oQsxB5FAYxl4hskilwg84Qx5guzunXMKobsETrKjMU4xO7KjMU4xO:6ZqRPsvchskilwgiMnXMRsQKjYQKjY

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks