Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cfe24cb8838f20a224f66b81d359aa8e_JaffaCakes118

  • Size

    323KB

  • Sample

    240906-s63ktavenh

  • MD5

    cfe24cb8838f20a224f66b81d359aa8e

  • SHA1

    053ee9b49573c3141d322ddf848fa204b0ba2c98

  • SHA256

    0ec20e64500f44e2e6522780231260a0f23f39ef575e5d76279029b539d49a5d

  • SHA512

    a35f395d1e30e3833d5134722745e352ccd477bed63f00b1ec427a150231f5f88470ea80c7fcd3ec783a0b40e9d9b951f0a17bc919ad8942e0634fe879aa755d

  • SSDEEP

    6144:jB0DFutpHEBEbBiE5tfFwQVXS948MjuNU7MqKep8cR0GHK2Xny/7Dqdf/aS:jB0DFqF7BiCttwaa48MjuNKMM30R2ioz

Malware Config

Targets

    • Target

      cfe24cb8838f20a224f66b81d359aa8e_JaffaCakes118

    • Size

      323KB

    • MD5

      cfe24cb8838f20a224f66b81d359aa8e

    • SHA1

      053ee9b49573c3141d322ddf848fa204b0ba2c98

    • SHA256

      0ec20e64500f44e2e6522780231260a0f23f39ef575e5d76279029b539d49a5d

    • SHA512

      a35f395d1e30e3833d5134722745e352ccd477bed63f00b1ec427a150231f5f88470ea80c7fcd3ec783a0b40e9d9b951f0a17bc919ad8942e0634fe879aa755d

    • SSDEEP

      6144:jB0DFutpHEBEbBiE5tfFwQVXS948MjuNU7MqKep8cR0GHK2Xny/7Dqdf/aS:jB0DFqF7BiCttwaa48MjuNKMM30R2ioz

    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks