Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e2beb6fb578ae9997b332622be88dbc5_JaffaCakes118

  • Size

    35KB

  • Sample

    240406-rtpmracd4t

  • MD5

    e2beb6fb578ae9997b332622be88dbc5

  • SHA1

    803b4166afe8d487d442885e6ecd7000c69be9e9

  • SHA256

    a1bdb135b75545d37ec0e6eca13c405066002d22a470d773c862e8d2883b24f6

  • SHA512

    d5d9193afcb385e7efc0781fa1100cf091947225da54463a149c09a63123ff5bce0f3ec2a04f44141cb40957508523324595d801822b099722dda91341ef1bbc

  • SSDEEP

    768:JBmmsFEHSc5yWz9KCCRZsAT62NpOUY8P2CY5ztlFkYNK8M:JBmmsFl1jUE1Np3z2CgzlFM

Score
8/10

Malware Config

Targets

    • Target

      e2beb6fb578ae9997b332622be88dbc5_JaffaCakes118

    • Size

      35KB

    • MD5

      e2beb6fb578ae9997b332622be88dbc5

    • SHA1

      803b4166afe8d487d442885e6ecd7000c69be9e9

    • SHA256

      a1bdb135b75545d37ec0e6eca13c405066002d22a470d773c862e8d2883b24f6

    • SHA512

      d5d9193afcb385e7efc0781fa1100cf091947225da54463a149c09a63123ff5bce0f3ec2a04f44141cb40957508523324595d801822b099722dda91341ef1bbc

    • SSDEEP

      768:JBmmsFEHSc5yWz9KCCRZsAT62NpOUY8P2CY5ztlFkYNK8M:JBmmsFl1jUE1Np3z2CgzlFM

    Score
    8/10
    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks