Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0b121fdc987b1e986d52047f8281d120_JaffaCakes118

  • Size

    165KB

  • Sample

    241002-rkkmfathjg

  • MD5

    0b121fdc987b1e986d52047f8281d120

  • SHA1

    8def3f047e195cbcdbd3bc22d98d5d0a39a40356

  • SHA256

    f1457524971a458ad4b08a9c86ff4524bc7ae3d1943ed5275375e85bea12422b

  • SHA512

    3a64506355fdc537f8f501ab74bf68bebc398383046a67104e7bc488914cf4e1e1596c8004849f41d8ff3230fed00895a39b609a014ccf01feccde902f48afe1

  • SSDEEP

    3072:64HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:BiI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      0b121fdc987b1e986d52047f8281d120_JaffaCakes118

    • Size

      165KB

    • MD5

      0b121fdc987b1e986d52047f8281d120

    • SHA1

      8def3f047e195cbcdbd3bc22d98d5d0a39a40356

    • SHA256

      f1457524971a458ad4b08a9c86ff4524bc7ae3d1943ed5275375e85bea12422b

    • SHA512

      3a64506355fdc537f8f501ab74bf68bebc398383046a67104e7bc488914cf4e1e1596c8004849f41d8ff3230fed00895a39b609a014ccf01feccde902f48afe1

    • SSDEEP

      3072:64HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:BiI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks