Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d5113bbaa12baec847ddebc9d3ff56ec_JaffaCakes118

  • Size

    64KB

  • Sample

    240908-zhwkxsvaqj

  • MD5

    d5113bbaa12baec847ddebc9d3ff56ec

  • SHA1

    be79e31323f94ca493069bed06b43b02111e72e3

  • SHA256

    fd37f930251c0a257447520f489bd6b0f7cbcea76b6efc77d9f2482cdebf0725

  • SHA512

    f899d5a02dddc78aa9cdd90cd89c4bf0d6761f77078a3de5871c49c205e8bd1540972742d701dd2ddb2d9c02fe10ad29c6d74fe5d8b41ceb8c087f8ced15421e

  • SSDEEP

    1536:jhqo/k4gaIZYimpV1JkmJA02f6fcRxhWM:wcIuJ/8cIhW

Malware Config

Targets

    • Target

      d5113bbaa12baec847ddebc9d3ff56ec_JaffaCakes118

    • Size

      64KB

    • MD5

      d5113bbaa12baec847ddebc9d3ff56ec

    • SHA1

      be79e31323f94ca493069bed06b43b02111e72e3

    • SHA256

      fd37f930251c0a257447520f489bd6b0f7cbcea76b6efc77d9f2482cdebf0725

    • SHA512

      f899d5a02dddc78aa9cdd90cd89c4bf0d6761f77078a3de5871c49c205e8bd1540972742d701dd2ddb2d9c02fe10ad29c6d74fe5d8b41ceb8c087f8ced15421e

    • SSDEEP

      1536:jhqo/k4gaIZYimpV1JkmJA02f6fcRxhWM:wcIuJ/8cIhW

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks