Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fd6592eda3016bc10042850aa52ad0f1_JaffaCakes118

  • Size

    120KB

  • Sample

    240928-3yqldsvbmh

  • MD5

    fd6592eda3016bc10042850aa52ad0f1

  • SHA1

    5f125dd1e5ddf7ed5a2af4172fe65d5e80a27205

  • SHA256

    9ec6e66d38ae246d735171f509e81e85ab240518da6a89524bbd3adabc2f8cb2

  • SHA512

    ed213e9dfc0669e0e3ef4fcc4248d29fc42e82933abc7bf3b77387fefbdcb8e032fde40d55631d083bef192ae02508b07cd95c96c8c95b438f3406eec47c517a

  • SSDEEP

    1536:xCFCFsfeS6VGIoaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/6lUkt5ycQg:mCketVXoW2MtF3lV9qkUyLX

Malware Config

Targets

    • Target

      fd6592eda3016bc10042850aa52ad0f1_JaffaCakes118

    • Size

      120KB

    • MD5

      fd6592eda3016bc10042850aa52ad0f1

    • SHA1

      5f125dd1e5ddf7ed5a2af4172fe65d5e80a27205

    • SHA256

      9ec6e66d38ae246d735171f509e81e85ab240518da6a89524bbd3adabc2f8cb2

    • SHA512

      ed213e9dfc0669e0e3ef4fcc4248d29fc42e82933abc7bf3b77387fefbdcb8e032fde40d55631d083bef192ae02508b07cd95c96c8c95b438f3406eec47c517a

    • SSDEEP

      1536:xCFCFsfeS6VGIoaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/6lUkt5ycQg:mCketVXoW2MtF3lV9qkUyLX

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks