Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f04990a5b976d6c5627f1c2f3a73c81c_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240415-evw21aec79

  • MD5

    f04990a5b976d6c5627f1c2f3a73c81c

  • SHA1

    e9de8d434ba3cf3b0f0c982482353209d88986e1

  • SHA256

    3e18a734492334e90f064e61e71ec5615e365467535be81dd45da69f5322f281

  • SHA512

    aa6023901877c0e19c533d765e44efb5f691dc200a02c779126c0fb2c31e1a8f7fd4a145a312b37ccdf3765beb41e855da49d6404a43ac1fa21190d56ede18ad

  • SSDEEP

    49152:h3xmfcPpddbGR005DFG5Ir4XaFTYhB94hCt3+FO/LYI:DmfcPXd6RzM5IMXaehBa80I

Malware Config

Targets

    • Target

      f04990a5b976d6c5627f1c2f3a73c81c_JaffaCakes118

    • Size

      1.9MB

    • MD5

      f04990a5b976d6c5627f1c2f3a73c81c

    • SHA1

      e9de8d434ba3cf3b0f0c982482353209d88986e1

    • SHA256

      3e18a734492334e90f064e61e71ec5615e365467535be81dd45da69f5322f281

    • SHA512

      aa6023901877c0e19c533d765e44efb5f691dc200a02c779126c0fb2c31e1a8f7fd4a145a312b37ccdf3765beb41e855da49d6404a43ac1fa21190d56ede18ad

    • SSDEEP

      49152:h3xmfcPpddbGR005DFG5Ir4XaFTYhB94hCt3+FO/LYI:DmfcPXd6RzM5IMXaehBa80I

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks