Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f237d81467076c00c5db9b4360758a4a_JaffaCakes118

  • Size

    385KB

  • Sample

    240415-3z53gabg84

  • MD5

    f237d81467076c00c5db9b4360758a4a

  • SHA1

    f75120ee2a3fe6833456481b9afacbd75b954a6d

  • SHA256

    b2a40e2d57a690db443740cb7c0c92c7de67fdd885eaccbea76918a49d43886a

  • SHA512

    d4cbee353779ace3a460a8fd4af5e67027c3da05c868e44d7cf6641223266b17a65885dfc37c3526e52bb22ad9a3c6d24b9297ecf93f5a66aaf85a975034c9c5

  • SSDEEP

    12288:qNAP2dK3/GY/wTAPfacKyZBF2/Wo6E71aB:xUW/TPixQBo/BaB

Score
7/10

Malware Config

Targets

    • Target

      f237d81467076c00c5db9b4360758a4a_JaffaCakes118

    • Size

      385KB

    • MD5

      f237d81467076c00c5db9b4360758a4a

    • SHA1

      f75120ee2a3fe6833456481b9afacbd75b954a6d

    • SHA256

      b2a40e2d57a690db443740cb7c0c92c7de67fdd885eaccbea76918a49d43886a

    • SHA512

      d4cbee353779ace3a460a8fd4af5e67027c3da05c868e44d7cf6641223266b17a65885dfc37c3526e52bb22ad9a3c6d24b9297ecf93f5a66aaf85a975034c9c5

    • SSDEEP

      12288:qNAP2dK3/GY/wTAPfacKyZBF2/Wo6E71aB:xUW/TPixQBo/BaB

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks