Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bed7798d739ac2640c7c4d08490f8d15_JaffaCakes118

  • Size

    515KB

  • Sample

    240824-sdechsxdmk

  • MD5

    bed7798d739ac2640c7c4d08490f8d15

  • SHA1

    d3b64dea545eafec80fda3b8ee2948e649e14451

  • SHA256

    9688f96942d43fc0ab2807687ac84249b1199e6f1ecbe5cae2a6ae5bb51f1fdd

  • SHA512

    9b97d2e055dcafb8003f08abaef9af80e389530ecd8a6d715ad06f924eba4f9692c58f5ac9483a402089e007495d727336e79d846f3ecd308075152e45a516ff

  • SSDEEP

    12288:dWsK+hzTeId6Qu63F3Z4mxxTDqVTVOCxE:4sK+d6Qu63QmX6VTzm

Score
7/10

Malware Config

Targets

    • Target

      bed7798d739ac2640c7c4d08490f8d15_JaffaCakes118

    • Size

      515KB

    • MD5

      bed7798d739ac2640c7c4d08490f8d15

    • SHA1

      d3b64dea545eafec80fda3b8ee2948e649e14451

    • SHA256

      9688f96942d43fc0ab2807687ac84249b1199e6f1ecbe5cae2a6ae5bb51f1fdd

    • SHA512

      9b97d2e055dcafb8003f08abaef9af80e389530ecd8a6d715ad06f924eba4f9692c58f5ac9483a402089e007495d727336e79d846f3ecd308075152e45a516ff

    • SSDEEP

      12288:dWsK+hzTeId6Qu63F3Z4mxxTDqVTVOCxE:4sK+d6Qu63QmX6VTzm

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks