Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    04998eed18ef988c94fddd5779d0ca22_JaffaCakes118

  • Size

    165KB

  • Sample

    241001-gmavxaxhkf

  • MD5

    04998eed18ef988c94fddd5779d0ca22

  • SHA1

    27fd142859505fc7866f0761aca43e2f9eae5618

  • SHA256

    fdf57ddd49aa7452e2319befb4c814a576c2c921dbd6ea0fc472d896f3e36dfc

  • SHA512

    e6bf63a6c25b0b2912bac9c5d807cd73d681669f774ee9ac0ac47f924bdf83082870b765fd283ad56a05fab6a09401bfbd534f616424435d552ba0720e258e09

  • SSDEEP

    3072:14HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:GiI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      04998eed18ef988c94fddd5779d0ca22_JaffaCakes118

    • Size

      165KB

    • MD5

      04998eed18ef988c94fddd5779d0ca22

    • SHA1

      27fd142859505fc7866f0761aca43e2f9eae5618

    • SHA256

      fdf57ddd49aa7452e2319befb4c814a576c2c921dbd6ea0fc472d896f3e36dfc

    • SHA512

      e6bf63a6c25b0b2912bac9c5d807cd73d681669f774ee9ac0ac47f924bdf83082870b765fd283ad56a05fab6a09401bfbd534f616424435d552ba0720e258e09

    • SSDEEP

      3072:14HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:GiI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks