Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118

  • Size

    138KB

  • Sample

    240824-xfla3atdpb

  • MD5

    bf3278465406b491b1e311f2dfe6a44e

  • SHA1

    5b0a11e0e6b0df23e64ffb6bc80c8d71b14021e5

  • SHA256

    5a757a91732dbe9c76b92d7b86501897b14d6aa92074d05ae7d0fd822d3349e9

  • SHA512

    44a8e97ea6fb799a5a19b5bc89c3bbf6bdb7dbb684a126f96cb5f6734b0fa7d803be39eeeb2038b72fdbe0a6ac027dfc148b9226775bf12c86240cde867f5652

  • SSDEEP

    3072:GSaP0Z050tfQQMvmkBN3WvRrMogdE/7/pPwyP:GSaPC050tfQwkv3wwouE9P

Malware Config

Targets

    • Target

      bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118

    • Size

      138KB

    • MD5

      bf3278465406b491b1e311f2dfe6a44e

    • SHA1

      5b0a11e0e6b0df23e64ffb6bc80c8d71b14021e5

    • SHA256

      5a757a91732dbe9c76b92d7b86501897b14d6aa92074d05ae7d0fd822d3349e9

    • SHA512

      44a8e97ea6fb799a5a19b5bc89c3bbf6bdb7dbb684a126f96cb5f6734b0fa7d803be39eeeb2038b72fdbe0a6ac027dfc148b9226775bf12c86240cde867f5652

    • SSDEEP

      3072:GSaP0Z050tfQQMvmkBN3WvRrMogdE/7/pPwyP:GSaPC050tfQwkv3wwouE9P

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks