Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dd8b1b0b9002f34b6de1ce5795af7044_JaffaCakes118

  • Size

    184KB

  • Sample

    240913-dlhmks1fma

  • MD5

    dd8b1b0b9002f34b6de1ce5795af7044

  • SHA1

    21a258520bc8a5752bd301fdc30246e2d7b09cf1

  • SHA256

    49caadac601106fea44e5865d240e71989b737a27968cf07a585cb6aa7b506d5

  • SHA512

    291cdbd385222f9c5569b00446f2288db97a069c56de0f90bbc6e045d8630132a246dc1ce283350ee101a1e9b01a8e6edf4356b637768a0735d433d3b8bf4d28

  • SSDEEP

    3072:6Xj0wZchwJVqMuS4OX0ggDDIotbJKbkrQa:azZ4wzZuS4OXRmDnbJka

Score
7/10

Malware Config

Targets

    • Target

      dd8b1b0b9002f34b6de1ce5795af7044_JaffaCakes118

    • Size

      184KB

    • MD5

      dd8b1b0b9002f34b6de1ce5795af7044

    • SHA1

      21a258520bc8a5752bd301fdc30246e2d7b09cf1

    • SHA256

      49caadac601106fea44e5865d240e71989b737a27968cf07a585cb6aa7b506d5

    • SHA512

      291cdbd385222f9c5569b00446f2288db97a069c56de0f90bbc6e045d8630132a246dc1ce283350ee101a1e9b01a8e6edf4356b637768a0735d433d3b8bf4d28

    • SSDEEP

      3072:6Xj0wZchwJVqMuS4OX0ggDDIotbJKbkrQa:azZ4wzZuS4OXRmDnbJka

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks