Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3d7ec7b32eb91c6c03adbf029904e2ff_JaffaCakes118

  • Size

    327KB

  • Sample

    241013-drne1s1amr

  • MD5

    3d7ec7b32eb91c6c03adbf029904e2ff

  • SHA1

    be2a12a862f9485418e082a4b3ac1d34e1713829

  • SHA256

    36bfed2dc6cc1d69edffdb6c67afd5ad3f41ccdc8536d4a9182f9adc67fed742

  • SHA512

    14f037c306ba841eac415a032d836f1eefb10beab071329f7fcacb579f37a8c047b06fa750cc8b1879687c774147ed6a10df0934f4d67ac1efe06485550888bd

  • SSDEEP

    6144:ezZGB2LST0EtUxE8C4GgdLPYap2dDDe8wzHpcyFBF925:ez0kcVmYw2FDFo2WF9Y

Malware Config

Targets

    • Target

      3d7ec7b32eb91c6c03adbf029904e2ff_JaffaCakes118

    • Size

      327KB

    • MD5

      3d7ec7b32eb91c6c03adbf029904e2ff

    • SHA1

      be2a12a862f9485418e082a4b3ac1d34e1713829

    • SHA256

      36bfed2dc6cc1d69edffdb6c67afd5ad3f41ccdc8536d4a9182f9adc67fed742

    • SHA512

      14f037c306ba841eac415a032d836f1eefb10beab071329f7fcacb579f37a8c047b06fa750cc8b1879687c774147ed6a10df0934f4d67ac1efe06485550888bd

    • SSDEEP

      6144:ezZGB2LST0EtUxE8C4GgdLPYap2dDDe8wzHpcyFBF925:ez0kcVmYw2FDFo2WF9Y

    • Modifies firewall policy service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks