Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_f9e22438575504aa17f3be8d04c78ceb

  • Size

    170KB

  • Sample

    250111-hjd9layrgw

  • MD5

    f9e22438575504aa17f3be8d04c78ceb

  • SHA1

    d34e61c502973dd3422b1fc45bd1541342dedf94

  • SHA256

    ec990f8c6b4612e1127b749322a6b33a53f16d140b210ee3c5bdd452ab18cc84

  • SHA512

    888c510f5686ff8b6ff7073eec28d15130506e22a2746a55626258e4c2a72190ab40717fd1a1519a7069f9b47e0672bbf608699be59f9038d94234445d060049

  • SSDEEP

    768:utkGowYSMm3kokaTotztbotnwfzvHEEXS/Dc1PxaNKXcOsJOpEg5NCNdseg5kmMp:utzfHMmXyD4/DcDNxEuR+

Malware Config

Targets

    • Target

      JaffaCakes118_f9e22438575504aa17f3be8d04c78ceb

    • Size

      170KB

    • MD5

      f9e22438575504aa17f3be8d04c78ceb

    • SHA1

      d34e61c502973dd3422b1fc45bd1541342dedf94

    • SHA256

      ec990f8c6b4612e1127b749322a6b33a53f16d140b210ee3c5bdd452ab18cc84

    • SHA512

      888c510f5686ff8b6ff7073eec28d15130506e22a2746a55626258e4c2a72190ab40717fd1a1519a7069f9b47e0672bbf608699be59f9038d94234445d060049

    • SSDEEP

      768:utkGowYSMm3kokaTotztbotnwfzvHEEXS/Dc1PxaNKXcOsJOpEg5NCNdseg5kmMp:utzfHMmXyD4/DcDNxEuR+

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks