Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f6cee187bcb4c29ef372b76fdc36f7a4_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240925-zcf82szbqh

  • MD5

    f6cee187bcb4c29ef372b76fdc36f7a4

  • SHA1

    ca31fc692dbf09a7bca55c17b6fe5ef4b86bd422

  • SHA256

    facd2dcb2a1382593dd63d2517819b20aa27b7ceb83df4ca5e0c2143d290833e

  • SHA512

    80822e0d4688b3c34b679471c0bf97c40cfa924cb01d083941290bec70cf972b8c9fb4f2b7ff2d5a24b6360c628eb6513f7341fe6985e1170fe2af5af1e21291

  • SSDEEP

    49152:y3nZtQL4N+4rregzhdeF0s4WEJss0XevR8Rm/51B76jiTP:y3nAoJrr1deRYssHSwRn76a

Score
7/10

Malware Config

Targets

    • Target

      taxcalc.exe

    • Size

      2.1MB

    • MD5

      224dacf13fdc6208c259e80b60930bd9

    • SHA1

      eef52ca52d0f4f9a25571109af2338c7a5cbfec5

    • SHA256

      0daca8eedcc0dec62533adfe8f223d7c32f62ab61766916271af392379eae4f9

    • SHA512

      a568732cb75b665603517f48034bf7fd2c658360809325c873454f2597d8981c143a0aa7adc74e658cfc6e230eeeae63bc8d186fa339b591de16838a5c3b356e

    • SSDEEP

      49152:wCZN2Ev2HSNchehklLKsWuGtTMx5UMt6cd3:iscDmsWVw5UMt/

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks