Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ef535403008e153353a6f169f9ed4013_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240921-jcd6pa1dqb

  • MD5

    ef535403008e153353a6f169f9ed4013

  • SHA1

    ae073a4139b6031778b6850535878170a7441743

  • SHA256

    9112ff45e06e893cb4eca5e45e69dc6383e9908fc1025cbc616aaeabc2f00f39

  • SHA512

    4fada6e6ed0f370f6d0da9a73fa7fe6a69d893d42496d990da76c9646a8a424c071302c896d58cf69ba4d611dec1c11addccbc9b953d2ff45f2125200e33c491

  • SSDEEP

    49152:g5UyCgRTTSQGr4cvNB3PvgaCLrc3VhDyo:kCEavNrXR

Score
7/10

Malware Config

Targets

    • Target

      ef535403008e153353a6f169f9ed4013_JaffaCakes118

    • Size

      1.8MB

    • MD5

      ef535403008e153353a6f169f9ed4013

    • SHA1

      ae073a4139b6031778b6850535878170a7441743

    • SHA256

      9112ff45e06e893cb4eca5e45e69dc6383e9908fc1025cbc616aaeabc2f00f39

    • SHA512

      4fada6e6ed0f370f6d0da9a73fa7fe6a69d893d42496d990da76c9646a8a424c071302c896d58cf69ba4d611dec1c11addccbc9b953d2ff45f2125200e33c491

    • SSDEEP

      49152:g5UyCgRTTSQGr4cvNB3PvgaCLrc3VhDyo:kCEavNrXR

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks