Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb4df16760a9604820186ea1d157a5d4_JaffaCakes118

  • Size

    744KB

  • Sample

    240410-r3125sef7v

  • MD5

    eb4df16760a9604820186ea1d157a5d4

  • SHA1

    c661b9c43c71e7d4b57cf976777858c5cef8ab6e

  • SHA256

    c67645aaa732f42607a922708162d62ef2981269ea6b050d870a5aa5c043f682

  • SHA512

    f681e024610aa277b6a156c64975c876c9dcda9ae4a2171799253a31af7cec3c8149e05e22086ea345a0afb23bf17e298700ff1d2dd4c05fe1d054dac5782c63

  • SSDEEP

    12288:xb8eAg8hJy6xR9dXJDfE6vRKAAgL5VVD2Zupw3pQkuAMSYKF6GC1UCKF+SS9O8+b:SZg8h/xRL5fvNAgNKgxAMNKF6GC1tO+Q

Malware Config

Targets

    • Target

      eb4df16760a9604820186ea1d157a5d4_JaffaCakes118

    • Size

      744KB

    • MD5

      eb4df16760a9604820186ea1d157a5d4

    • SHA1

      c661b9c43c71e7d4b57cf976777858c5cef8ab6e

    • SHA256

      c67645aaa732f42607a922708162d62ef2981269ea6b050d870a5aa5c043f682

    • SHA512

      f681e024610aa277b6a156c64975c876c9dcda9ae4a2171799253a31af7cec3c8149e05e22086ea345a0afb23bf17e298700ff1d2dd4c05fe1d054dac5782c63

    • SSDEEP

      12288:xb8eAg8hJy6xR9dXJDfE6vRKAAgL5VVD2Zupw3pQkuAMSYKF6GC1UCKF+SS9O8+b:SZg8h/xRL5fvNAgNKgxAMNKF6GC1tO+Q

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks