Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3891a6bee33b4ac62040305b22497336_JaffaCakes118

  • Size

    165KB

  • Sample

    241012-fyjfrazdnr

  • MD5

    3891a6bee33b4ac62040305b22497336

  • SHA1

    350e47ca7be060959e34662e0b6eb75f33e2cdb8

  • SHA256

    0c8fd460eaa4a2687b8b00554b2b6361d108e6a430706acf085a8759b6886135

  • SHA512

    a6feda1bee7344435226bf55b7bc7be6ad273e94ce37867afaa44a5625586b8443887a3dcdf44db307ba6d6d754b01611665541a94ad3eed0433cdce412600f8

  • SSDEEP

    3072:Z4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4t:yiI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      3891a6bee33b4ac62040305b22497336_JaffaCakes118

    • Size

      165KB

    • MD5

      3891a6bee33b4ac62040305b22497336

    • SHA1

      350e47ca7be060959e34662e0b6eb75f33e2cdb8

    • SHA256

      0c8fd460eaa4a2687b8b00554b2b6361d108e6a430706acf085a8759b6886135

    • SHA512

      a6feda1bee7344435226bf55b7bc7be6ad273e94ce37867afaa44a5625586b8443887a3dcdf44db307ba6d6d754b01611665541a94ad3eed0433cdce412600f8

    • SSDEEP

      3072:Z4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4t:yiI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks