Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    047f72cdc026620cb8db9dc192042425_JaffaCakes118

  • Size

    551KB

  • Sample

    241001-fzyl3awgkb

  • MD5

    047f72cdc026620cb8db9dc192042425

  • SHA1

    76600993fab9c5a830cf2871f3391f17dfa7b880

  • SHA256

    64b5aa64283438737541746951a72e0a6743234718621be5466fdac8d9894c0e

  • SHA512

    f19240cadee83f58ea0477e4680414ad66bd69d4e7613ac6d7965fabcbd80fa71fb20e4987cc39a7b5f524fcdb3e5201a8e500c4173f0bbbd13e18e273b9896e

  • SSDEEP

    12288:h1OgLdaOlgbJuMmFcouJqkXWctn+MEfO8:h1OYdaOlgJHJJqkXtMO8

Malware Config

Targets

    • Target

      047f72cdc026620cb8db9dc192042425_JaffaCakes118

    • Size

      551KB

    • MD5

      047f72cdc026620cb8db9dc192042425

    • SHA1

      76600993fab9c5a830cf2871f3391f17dfa7b880

    • SHA256

      64b5aa64283438737541746951a72e0a6743234718621be5466fdac8d9894c0e

    • SHA512

      f19240cadee83f58ea0477e4680414ad66bd69d4e7613ac6d7965fabcbd80fa71fb20e4987cc39a7b5f524fcdb3e5201a8e500c4173f0bbbd13e18e273b9896e

    • SSDEEP

      12288:h1OgLdaOlgbJuMmFcouJqkXWctn+MEfO8:h1OYdaOlgJHJJqkXtMO8

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks