Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0acba0ac120021257125a88dbc2cdd50_JaffaCakes118

  • Size

    1.7MB

  • Sample

    241002-p927nsxcqm

  • MD5

    0acba0ac120021257125a88dbc2cdd50

  • SHA1

    99b7514d72734db709c489604f6d30ee5ffff463

  • SHA256

    d93bdd46966fc445cbd034548bdbb547ea4e499a7ac0eb0db04b76b13bf04fd9

  • SHA512

    4314c323d3d7743970bf8477d827ee6a8a3c51cd839b2fdf28eef4e34a73efd04687e2b0a82031e08165232113c2ce0828daa537ebbc1a8766d1c7305f97158c

  • SSDEEP

    49152:OZhpafFU8w7Yy2g8+vkJSk1mUlE4M8z4wNCW:Or8f68w7d2P+uSsmUltmwY

Malware Config

Targets

    • Target

      0acba0ac120021257125a88dbc2cdd50_JaffaCakes118

    • Size

      1.7MB

    • MD5

      0acba0ac120021257125a88dbc2cdd50

    • SHA1

      99b7514d72734db709c489604f6d30ee5ffff463

    • SHA256

      d93bdd46966fc445cbd034548bdbb547ea4e499a7ac0eb0db04b76b13bf04fd9

    • SHA512

      4314c323d3d7743970bf8477d827ee6a8a3c51cd839b2fdf28eef4e34a73efd04687e2b0a82031e08165232113c2ce0828daa537ebbc1a8766d1c7305f97158c

    • SSDEEP

      49152:OZhpafFU8w7Yy2g8+vkJSk1mUlE4M8z4wNCW:Or8f68w7d2P+uSsmUltmwY

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks