Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1216393742638d5eb2de71c724aca661_JaffaCakes118

  • Size

    165KB

  • Sample

    241004-ghw8caxenr

  • MD5

    1216393742638d5eb2de71c724aca661

  • SHA1

    c49a80cf17151aea01d79ac3fece28840a8d5b0b

  • SHA256

    ffb7af5f2d04f4629f78a62cf569122c8433eebafb8023899dd70df9f37e6e38

  • SHA512

    827d024ff6d06f36288467ae638e3dca544f71e5599e1207d5c216ad775c796def3a2fd2132730f4f9e3fe041b26ce115ad7a106dcdfd97081a6e5e2657af2d7

  • SSDEEP

    3072:24HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:1iI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      1216393742638d5eb2de71c724aca661_JaffaCakes118

    • Size

      165KB

    • MD5

      1216393742638d5eb2de71c724aca661

    • SHA1

      c49a80cf17151aea01d79ac3fece28840a8d5b0b

    • SHA256

      ffb7af5f2d04f4629f78a62cf569122c8433eebafb8023899dd70df9f37e6e38

    • SHA512

      827d024ff6d06f36288467ae638e3dca544f71e5599e1207d5c216ad775c796def3a2fd2132730f4f9e3fe041b26ce115ad7a106dcdfd97081a6e5e2657af2d7

    • SSDEEP

      3072:24HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:1iI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks