Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bffbdcb242d02f3e06a42d4683c01333_JaffaCakes118

  • Size

    58KB

  • Sample

    240825-fhspgsxcjn

  • MD5

    bffbdcb242d02f3e06a42d4683c01333

  • SHA1

    73455874e31abd2f6691b3ddd548d3a98f459946

  • SHA256

    22360041c4371f5fe11533c3ca81ab454efc98fc14701c5984fef08109fa4e4a

  • SHA512

    7fa5d07284ce7b0b7254d1a8f8321678d5286fe24795c9897abbc6b69bbbc0921b81c039a636e6f226691d42143b8bc94dc7314a1daa5c53bdc5a3dcfb330333

  • SSDEEP

    1536:mgugB5SgUYjArwb78oPqDVKpVTwmBLJnMmecFnC9q:mguWYdrwbxPaKp9wmBLJnMdkmq

Malware Config

Targets

    • Target

      bffbdcb242d02f3e06a42d4683c01333_JaffaCakes118

    • Size

      58KB

    • MD5

      bffbdcb242d02f3e06a42d4683c01333

    • SHA1

      73455874e31abd2f6691b3ddd548d3a98f459946

    • SHA256

      22360041c4371f5fe11533c3ca81ab454efc98fc14701c5984fef08109fa4e4a

    • SHA512

      7fa5d07284ce7b0b7254d1a8f8321678d5286fe24795c9897abbc6b69bbbc0921b81c039a636e6f226691d42143b8bc94dc7314a1daa5c53bdc5a3dcfb330333

    • SSDEEP

      1536:mgugB5SgUYjArwb78oPqDVKpVTwmBLJnMmecFnC9q:mguWYdrwbxPaKp9wmBLJnMdkmq

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks