Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118

  • Size

    116KB

  • Sample

    240822-xjrbgsvell

  • MD5

    b8bea7e30d8308b1c7b1a4f925622d18

  • SHA1

    aa6dbbe1d155e431af4fdbc5415163f4d716db9f

  • SHA256

    7d7c5995bd4a9355ae32d11807b360d5d6bb15ebf9873622b3e24aad6c2f2da6

  • SHA512

    1586127f8d6d6ee963320b3eea65c1329ccdfd495eac547ed60380e6cc06bc4315b38745d704e9c2da0f499153282d00cf946de79397c5477df994852ceafa8e

  • SSDEEP

    1536:LznfWynDYXtilW2DTvOB0rnqm5CGmGXjKkAbcX+pCaFy5YzAT+/vpFvnjfZV3o:LzuOYdsmsnr2G1AbW+pp4r+frz3o

Malware Config

Targets

    • Target

      b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118

    • Size

      116KB

    • MD5

      b8bea7e30d8308b1c7b1a4f925622d18

    • SHA1

      aa6dbbe1d155e431af4fdbc5415163f4d716db9f

    • SHA256

      7d7c5995bd4a9355ae32d11807b360d5d6bb15ebf9873622b3e24aad6c2f2da6

    • SHA512

      1586127f8d6d6ee963320b3eea65c1329ccdfd495eac547ed60380e6cc06bc4315b38745d704e9c2da0f499153282d00cf946de79397c5477df994852ceafa8e

    • SSDEEP

      1536:LznfWynDYXtilW2DTvOB0rnqm5CGmGXjKkAbcX+pCaFy5YzAT+/vpFvnjfZV3o:LzuOYdsmsnr2G1AbW+pp4r+frz3o

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.