Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2f487de624de03c1df12168d08ac2e54_JaffaCakes118

  • Size

    552KB

  • Sample

    241009-l9h71sybqn

  • MD5

    2f487de624de03c1df12168d08ac2e54

  • SHA1

    084424d72682fa9e2d981431a18a49d5558c1bd4

  • SHA256

    4fd93bbb21d237b209ff133b6b741f824e1bf994183abf5f71217aff8c98ba3b

  • SHA512

    3ee0a5f4b928416b33ca42202a183a56004a515ffb35cc5c5bd3b923f5d7e75da32beb5cb5c394e7c6c663dde717a98e40fe0168867be11555934e9f8077ac82

  • SSDEEP

    12288:h1OgLdaOKWctn+MEfOUgbJuMmFcouJqkY:h1OYdaOKtMOUgJHJJqkY

Malware Config

Targets

    • Target

      2f487de624de03c1df12168d08ac2e54_JaffaCakes118

    • Size

      552KB

    • MD5

      2f487de624de03c1df12168d08ac2e54

    • SHA1

      084424d72682fa9e2d981431a18a49d5558c1bd4

    • SHA256

      4fd93bbb21d237b209ff133b6b741f824e1bf994183abf5f71217aff8c98ba3b

    • SHA512

      3ee0a5f4b928416b33ca42202a183a56004a515ffb35cc5c5bd3b923f5d7e75da32beb5cb5c394e7c6c663dde717a98e40fe0168867be11555934e9f8077ac82

    • SSDEEP

      12288:h1OgLdaOKWctn+MEfOUgbJuMmFcouJqkY:h1OYdaOKtMOUgJHJJqkY

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks