Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118

  • Size

    124KB

  • Sample

    240912-nv7m6stelf

  • MD5

    dc407a02dc26fd5d2040441a33c1ad49

  • SHA1

    3b3fd5554c1d25fcb19592d7aafa7a1b388ee01d

  • SHA256

    7a0c2a9833ef6897eceaa876f732e12171995a6e0c1d1151153d0626f1d9730d

  • SHA512

    2a1d18f41ddb60b17035b699d28caa89a6630d588623a62f332fc33987a83f9c23e067f187c1b9c6f02f76a3c018723fbcf6e244526688f33995e8007237b43d

  • SSDEEP

    1536:L6bzEFPF/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:mbzEFPF/67gjH8ri8iwQL

Malware Config

Targets

    • Target

      dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118

    • Size

      124KB

    • MD5

      dc407a02dc26fd5d2040441a33c1ad49

    • SHA1

      3b3fd5554c1d25fcb19592d7aafa7a1b388ee01d

    • SHA256

      7a0c2a9833ef6897eceaa876f732e12171995a6e0c1d1151153d0626f1d9730d

    • SHA512

      2a1d18f41ddb60b17035b699d28caa89a6630d588623a62f332fc33987a83f9c23e067f187c1b9c6f02f76a3c018723fbcf6e244526688f33995e8007237b43d

    • SSDEEP

      1536:L6bzEFPF/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:mbzEFPF/67gjH8ri8iwQL

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks