Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d5e755e286e7e0d12ae019655b7a53b3_JaffaCakes118

  • Size

    318KB

  • Sample

    240909-jqmpzs1akd

  • MD5

    d5e755e286e7e0d12ae019655b7a53b3

  • SHA1

    73f3f93a244ee9cbc1268b0b5172b891460ba13f

  • SHA256

    1523e3ad125e57070dc7f5cbfe4aa6fe32e78f00a3e33f5823b48045608508a6

  • SHA512

    c560b857659cbaca1d4eb41e145d816452c7b99be97437092fc1f7ab727798fd1279f7133e5e97b3b60b091777a3ef9ad726bc144a966b06c77ef5079d3b7be4

  • SSDEEP

    6144:ofwaYRov+q3VflCXvxIkOWDTPgGhM4sCm3mgdGCa0:ofwaY+mOL4TPgD4sCm3mgYC3

Malware Config

Targets

    • Target

      d5e755e286e7e0d12ae019655b7a53b3_JaffaCakes118

    • Size

      318KB

    • MD5

      d5e755e286e7e0d12ae019655b7a53b3

    • SHA1

      73f3f93a244ee9cbc1268b0b5172b891460ba13f

    • SHA256

      1523e3ad125e57070dc7f5cbfe4aa6fe32e78f00a3e33f5823b48045608508a6

    • SHA512

      c560b857659cbaca1d4eb41e145d816452c7b99be97437092fc1f7ab727798fd1279f7133e5e97b3b60b091777a3ef9ad726bc144a966b06c77ef5079d3b7be4

    • SSDEEP

      6144:ofwaYRov+q3VflCXvxIkOWDTPgGhM4sCm3mgdGCa0:ofwaY+mOL4TPgD4sCm3mgYC3

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks