Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d3a209d56a3e48a327fdacd4b60dd5e1_JaffaCakes118

  • Size

    152KB

  • Sample

    240908-f1va2ayfqk

  • MD5

    d3a209d56a3e48a327fdacd4b60dd5e1

  • SHA1

    b79c9b4266fbbbbed462c7695dcb1d3af2c32ee2

  • SHA256

    1db112cc9184f4d5b33962acc81db2423a1e4ebecc3e5c5108647042a4202440

  • SHA512

    d65769184cf343b8fe7224a2de1c965984ea91ca9ff18709de5b766a1b9530d588df5126910312c2cf86c8b4176b85547ec9d6d67b21614386767894f2dadb4e

  • SSDEEP

    3072:3DbEFv76nbvsMcZ3eawlI88rnXD2olnmIE5j4oQU:TSv76nbvsh1eI8onBod

Malware Config

Targets

    • Target

      d3a209d56a3e48a327fdacd4b60dd5e1_JaffaCakes118

    • Size

      152KB

    • MD5

      d3a209d56a3e48a327fdacd4b60dd5e1

    • SHA1

      b79c9b4266fbbbbed462c7695dcb1d3af2c32ee2

    • SHA256

      1db112cc9184f4d5b33962acc81db2423a1e4ebecc3e5c5108647042a4202440

    • SHA512

      d65769184cf343b8fe7224a2de1c965984ea91ca9ff18709de5b766a1b9530d588df5126910312c2cf86c8b4176b85547ec9d6d67b21614386767894f2dadb4e

    • SSDEEP

      3072:3DbEFv76nbvsMcZ3eawlI88rnXD2olnmIE5j4oQU:TSv76nbvsh1eI8onBod

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks