Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    16477b35b80b91ffc96410993e2303dc_JaffaCakes118

  • Size

    165KB

  • Sample

    241005-frzt6axbrr

  • MD5

    16477b35b80b91ffc96410993e2303dc

  • SHA1

    c376f43829d2fe98694688e5c0044b4b1f8bda17

  • SHA256

    c3dd1daf3593ea8896e2ef496842f040210a6784a0035c47e49781ee3512a783

  • SHA512

    79b39d773c1504318be84d707d484318639b57b676f3808a0f4a3d8b02d2d9c76782c5e0b37fc64312af84a9cc110d75144eda735b5bbea8b4fe80e0c6b83661

  • SSDEEP

    3072:L4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:0iI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      16477b35b80b91ffc96410993e2303dc_JaffaCakes118

    • Size

      165KB

    • MD5

      16477b35b80b91ffc96410993e2303dc

    • SHA1

      c376f43829d2fe98694688e5c0044b4b1f8bda17

    • SHA256

      c3dd1daf3593ea8896e2ef496842f040210a6784a0035c47e49781ee3512a783

    • SHA512

      79b39d773c1504318be84d707d484318639b57b676f3808a0f4a3d8b02d2d9c76782c5e0b37fc64312af84a9cc110d75144eda735b5bbea8b4fe80e0c6b83661

    • SSDEEP

      3072:L4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:0iI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks