Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_adb98023c3e9f04061ee66f43e2d2ea983301283d61324e69cef2a0304416e9b
-
Size
297KB
-
Sample
241221-ww6fhavrfs
-
MD5
a719d61d1ab087f5c9bbdc45031dce34
-
SHA1
fc1742845ab5e60190ca12e101431aaae40bce41
-
SHA256
adb98023c3e9f04061ee66f43e2d2ea983301283d61324e69cef2a0304416e9b
-
SHA512
f9046ce3af08781e8edf4fff500a60dd39f442f3a2e34a3b1898b5f9ac5af0bb8df761cb7c3951042ccf58daf9bc7525c91bd6ae832248b947ff4ac0ad7a30a2
-
SSDEEP
6144:qm+Kf/6ok3I1Fb4ClWrA1NSlMhdouNkQafRNQnOnMh3k9su9IeVzsV7:D+W/6NILbhWrA1NSmo+EQb5k9tueWd
Static task
static1
Behavioral task
behavioral1
Sample
7a2fd40a032e726bde8638b079963c499d20c7c197a0f91544f458977fbd3304.js
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
7a2fd40a032e726bde8638b079963c499d20c7c197a0f91544f458977fbd3304.js
-
Size
469KB
-
MD5
8fed7262f75ec7c978a03e8177dfadab
-
SHA1
3c95b2b69114082581b28a34533cbcddefd72516
-
SHA256
7a2fd40a032e726bde8638b079963c499d20c7c197a0f91544f458977fbd3304
-
SHA512
22a2ca24da0dd5d7a665d84fc58cc36013716d4605518f3c035d0bc5e6944825267e332708eb26623cba4e2d7b57b395caab6c5628b9e88f510fb23a8871e9f2
-
SSDEEP
6144:Qy6COPsZV2SvRmFgI9smdixnlahHhUgy6COPsZV2SvRmFgI9smdixnlahHhUt:wux5mFg6slxuKAux5mFg6slxuKt
-
Strrat family
-
Vjw0rm family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Execution
Command and Scripting Interpreter
1JavaScript
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1