Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2ced56fd80bff248a2246a11f329387a_JaffaCakes118

  • Size

    73KB

  • Sample

    241009-hwmfqswbmc

  • MD5

    2ced56fd80bff248a2246a11f329387a

  • SHA1

    fb8bb0dcfe1574e328ff36f5c6fb3e7635ae3066

  • SHA256

    e13ed141efba54680fb96927a9b41e56d56c51989ffc94b38ac8f83838c51000

  • SHA512

    2bec753f00d24aec454957137a2796cc444dbf8a688d24d5ba68c37dc1c4740deaa76abf1d9ce2378a102568dfa239100b2246dffe146b8d7eedb7c3b715fdc1

  • SSDEEP

    1536:AB2eH7Tr7xlD9d6L8k1qOMXLQzD5VE82dI9:glr7xR9EQk8P7QP6dI9

Malware Config

Targets

    • Target

      2ced56fd80bff248a2246a11f329387a_JaffaCakes118

    • Size

      73KB

    • MD5

      2ced56fd80bff248a2246a11f329387a

    • SHA1

      fb8bb0dcfe1574e328ff36f5c6fb3e7635ae3066

    • SHA256

      e13ed141efba54680fb96927a9b41e56d56c51989ffc94b38ac8f83838c51000

    • SHA512

      2bec753f00d24aec454957137a2796cc444dbf8a688d24d5ba68c37dc1c4740deaa76abf1d9ce2378a102568dfa239100b2246dffe146b8d7eedb7c3b715fdc1

    • SSDEEP

      1536:AB2eH7Tr7xlD9d6L8k1qOMXLQzD5VE82dI9:glr7xR9EQk8P7QP6dI9

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks