Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118
-
Size
125KB
-
Sample
241003-xbxtaszhpp
-
MD5
101a815d542d212a315b3ca36f2ab7e7
-
SHA1
7179f0249039f1706497ef3715483f35924b9398
-
SHA256
cfb7af75a76f0962c0682e99f9ff00f029a218563bbfde1ab90d095c80c70c31
-
SHA512
9e9053f8fc5af093338ae95798798217af5eddd888c5297c1fe35add37cab600f659bedac58dca667da569b88003522b3d85ff2304ccaa73cd32148332ecc676
-
SSDEEP
3072:0ckAxaE6jCSPYqZh4+aPl7bkbIkkUIkbIM:1kmakLqjx
Static task
static1
Behavioral task
behavioral1
Sample
101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118
-
Size
125KB
-
MD5
101a815d542d212a315b3ca36f2ab7e7
-
SHA1
7179f0249039f1706497ef3715483f35924b9398
-
SHA256
cfb7af75a76f0962c0682e99f9ff00f029a218563bbfde1ab90d095c80c70c31
-
SHA512
9e9053f8fc5af093338ae95798798217af5eddd888c5297c1fe35add37cab600f659bedac58dca667da569b88003522b3d85ff2304ccaa73cd32148332ecc676
-
SSDEEP
3072:0ckAxaE6jCSPYqZh4+aPl7bkbIkkUIkbIM:1kmakLqjx
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1