Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118

  • Size

    44KB

  • Sample

    240911-x5gn6syfkb

  • MD5

    db10a272f6a234ccc6021ff2b2444e34

  • SHA1

    4791b97d12871a03bbb3cd19aa913cd4b9405c67

  • SHA256

    ca34ae2c05e708d668058dbc4b0dadb7ad6a532e45dc63075002a9bcaa3717cd

  • SHA512

    038e24360acb880a9f5bdb2c2a8c142254dfb41c38b4a4c6a2952048a84187982b7323a2f5b2d2465fd8565450631573765e977d307a7b88aef087d0a5ce2c05

  • SSDEEP

    768:83n3G3j3qrJFTQTz/BoBrlKLXZ1ufT1LTRPYF2KvNdVSNode:83n3G3j3sqB6lKXufhLNYbvNbDe

Malware Config

Targets

    • Target

      db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118

    • Size

      44KB

    • MD5

      db10a272f6a234ccc6021ff2b2444e34

    • SHA1

      4791b97d12871a03bbb3cd19aa913cd4b9405c67

    • SHA256

      ca34ae2c05e708d668058dbc4b0dadb7ad6a532e45dc63075002a9bcaa3717cd

    • SHA512

      038e24360acb880a9f5bdb2c2a8c142254dfb41c38b4a4c6a2952048a84187982b7323a2f5b2d2465fd8565450631573765e977d307a7b88aef087d0a5ce2c05

    • SSDEEP

      768:83n3G3j3qrJFTQTz/BoBrlKLXZ1ufT1LTRPYF2KvNdVSNode:83n3G3j3sqB6lKXufhLNYbvNbDe

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks