Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    112dc26f534e4e55fefddaa621582eb0_JaffaCakes118

  • Size

    551KB

  • Sample

    241004-bba4mszblg

  • MD5

    112dc26f534e4e55fefddaa621582eb0

  • SHA1

    5597de93bebe233e2e1d7e945f246a071528cdab

  • SHA256

    76706689031f218ca95e49d057039a983362a549aced4071b079f375c758b93b

  • SHA512

    deb4c57bdc7848bbeda69258928cfd5a36c7ee4a4eab1fb6ad80ee243ac20ca3f4541e4faea7a153ca74e85cec6a5670040729adfc56e66d5286b082b5cb39b0

  • SSDEEP

    12288:h1OgLdaO0Wctn+MEfOUgbJuMmFcouJqks:h1OYdaO0tMOUgJHJJqks

Malware Config

Targets

    • Target

      112dc26f534e4e55fefddaa621582eb0_JaffaCakes118

    • Size

      551KB

    • MD5

      112dc26f534e4e55fefddaa621582eb0

    • SHA1

      5597de93bebe233e2e1d7e945f246a071528cdab

    • SHA256

      76706689031f218ca95e49d057039a983362a549aced4071b079f375c758b93b

    • SHA512

      deb4c57bdc7848bbeda69258928cfd5a36c7ee4a4eab1fb6ad80ee243ac20ca3f4541e4faea7a153ca74e85cec6a5670040729adfc56e66d5286b082b5cb39b0

    • SSDEEP

      12288:h1OgLdaO0Wctn+MEfOUgbJuMmFcouJqks:h1OYdaO0tMOUgJHJJqks

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks