Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1830ed42d04d38192639d9f3a50da590_JaffaCakes118

  • Size

    162KB

  • Sample

    241006-p81mfszarh

  • MD5

    1830ed42d04d38192639d9f3a50da590

  • SHA1

    c90aed3641e7f638bfd7fef444f7238c28760e28

  • SHA256

    dd1c862c11472b3c5354c2fcdce648d302050aaadfca373a198f0aa25a223d9f

  • SHA512

    290f9a1c542377bb0004a75503667f47077044954cda50cb2dd7ab7d2e52b1bb36fec2f36564f0ac693a70f7b0873cc97aca51981624be9ae2bbce41999309b7

  • SSDEEP

    3072:UiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h9:viilhmIQODDHBJdmOHIFs9

Score
7/10

Malware Config

Targets

    • Target

      1830ed42d04d38192639d9f3a50da590_JaffaCakes118

    • Size

      162KB

    • MD5

      1830ed42d04d38192639d9f3a50da590

    • SHA1

      c90aed3641e7f638bfd7fef444f7238c28760e28

    • SHA256

      dd1c862c11472b3c5354c2fcdce648d302050aaadfca373a198f0aa25a223d9f

    • SHA512

      290f9a1c542377bb0004a75503667f47077044954cda50cb2dd7ab7d2e52b1bb36fec2f36564f0ac693a70f7b0873cc97aca51981624be9ae2bbce41999309b7

    • SSDEEP

      3072:UiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h9:viilhmIQODDHBJdmOHIFs9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks