Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f02305330f50171aea1d900fdd34144a_JaffaCakes118

  • Size

    76KB

  • Sample

    240921-tegdya1ake

  • MD5

    f02305330f50171aea1d900fdd34144a

  • SHA1

    67ae2532c017f9f29af6222a9d4fb03eb1a9469f

  • SHA256

    cba944cc84411c39ab131dbd0d0ba22d3056218ef853f539f053b634a896168f

  • SHA512

    2cfebed5d1fdb5ac341b0f0c3a329f3ecade064a844be91a6520ebfa12d7f3bf8be7b1bc7532a5edce9bd776c8f2c9debe59cd854bb5b2077bf829f977bffba0

  • SSDEEP

    768:PgRh4wyVqzzpZbvoJF9uR6/DmKKl4aNxvIaiYHaeXJR3GZKyy83Nu4iEMlzr:PgRh4wyVOby+RqKBI5bgGQyy89u4i/

Malware Config

Targets

    • Target

      f02305330f50171aea1d900fdd34144a_JaffaCakes118

    • Size

      76KB

    • MD5

      f02305330f50171aea1d900fdd34144a

    • SHA1

      67ae2532c017f9f29af6222a9d4fb03eb1a9469f

    • SHA256

      cba944cc84411c39ab131dbd0d0ba22d3056218ef853f539f053b634a896168f

    • SHA512

      2cfebed5d1fdb5ac341b0f0c3a329f3ecade064a844be91a6520ebfa12d7f3bf8be7b1bc7532a5edce9bd776c8f2c9debe59cd854bb5b2077bf829f977bffba0

    • SSDEEP

      768:PgRh4wyVqzzpZbvoJF9uR6/DmKKl4aNxvIaiYHaeXJR3GZKyy83Nu4iEMlzr:PgRh4wyVOby+RqKBI5bgGQyy89u4i/

    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks