Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e17810b30f09d7dcf67528995c2e73f4_JaffaCakes118

  • Size

    664KB

  • Sample

    240915-b8cczazaqj

  • MD5

    e17810b30f09d7dcf67528995c2e73f4

  • SHA1

    6a02e7d86fa3b1d356111ebe8490c866bf1c8b81

  • SHA256

    2027ec29597f7b6c36f9c647945e4803bb44a1686bc2fa8b8294981213eb8e60

  • SHA512

    75cd251fa3243ed5c8ac687e14132c2198e3aecb86a8811a5c9ea33456a46c1b4544e22a5905e31ee50d0d9dd164e66f9318c020773b96aa6fdbc0ae3c07d39d

  • SSDEEP

    12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16a:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1F

Score
9/10

Malware Config

Targets

    • Target

      e17810b30f09d7dcf67528995c2e73f4_JaffaCakes118

    • Size

      664KB

    • MD5

      e17810b30f09d7dcf67528995c2e73f4

    • SHA1

      6a02e7d86fa3b1d356111ebe8490c866bf1c8b81

    • SHA256

      2027ec29597f7b6c36f9c647945e4803bb44a1686bc2fa8b8294981213eb8e60

    • SHA512

      75cd251fa3243ed5c8ac687e14132c2198e3aecb86a8811a5c9ea33456a46c1b4544e22a5905e31ee50d0d9dd164e66f9318c020773b96aa6fdbc0ae3c07d39d

    • SSDEEP

      12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16a:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1F

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks