Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f5acf31c5f763e0a4747106ba8ed8969_JaffaCakes118

  • Size

    385KB

  • Sample

    240925-k5yapsxbkr

  • MD5

    f5acf31c5f763e0a4747106ba8ed8969

  • SHA1

    62559ed2f44d2899fba04e814f3d9298966dab11

  • SHA256

    cdcb185faf0dc11374112bad5bbbefbcf21086d4e168a9bd6c37a5221a5040b8

  • SHA512

    d3c597e541a1aca46d022d9babc330591eaf88af33e1404ee0d9ef8c3ac1190bc2d629f58bb218ebfa5034c4878ca9b39eda315fe9002edfc4f56bb23eb4a69c

  • SSDEEP

    12288:7kWAehJuqT4qkn6Hv12hgbUNKMUGJsIHATYeX:7kWAAuqkqTzcKMU4nHC

Malware Config

Targets

    • Target

      f5acf31c5f763e0a4747106ba8ed8969_JaffaCakes118

    • Size

      385KB

    • MD5

      f5acf31c5f763e0a4747106ba8ed8969

    • SHA1

      62559ed2f44d2899fba04e814f3d9298966dab11

    • SHA256

      cdcb185faf0dc11374112bad5bbbefbcf21086d4e168a9bd6c37a5221a5040b8

    • SHA512

      d3c597e541a1aca46d022d9babc330591eaf88af33e1404ee0d9ef8c3ac1190bc2d629f58bb218ebfa5034c4878ca9b39eda315fe9002edfc4f56bb23eb4a69c

    • SSDEEP

      12288:7kWAehJuqT4qkn6Hv12hgbUNKMUGJsIHATYeX:7kWAAuqkqTzcKMU4nHC

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks