Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    15f8753300538010f8493d29c0e64eb0_JaffaCakes118

  • Size

    165KB

  • Sample

    241005-dx33naxapa

  • MD5

    15f8753300538010f8493d29c0e64eb0

  • SHA1

    8995e29b6a3eb2bf6efc65d03ecd8f146c3c7d3c

  • SHA256

    c80f72e88094ec56b3a72c5af812756100c6662759226479ef8e899ab69f3e79

  • SHA512

    aca247736bbca58d62fc36bb057e678af373fd91bac23405e467e44317c32cfae93d44f546594bffbf3de3ff080dc03a388fb3d861c42a1f8c477883cd6367be

  • SSDEEP

    3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:DiI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      15f8753300538010f8493d29c0e64eb0_JaffaCakes118

    • Size

      165KB

    • MD5

      15f8753300538010f8493d29c0e64eb0

    • SHA1

      8995e29b6a3eb2bf6efc65d03ecd8f146c3c7d3c

    • SHA256

      c80f72e88094ec56b3a72c5af812756100c6662759226479ef8e899ab69f3e79

    • SHA512

      aca247736bbca58d62fc36bb057e678af373fd91bac23405e467e44317c32cfae93d44f546594bffbf3de3ff080dc03a388fb3d861c42a1f8c477883cd6367be

    • SSDEEP

      3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:DiI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks