Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f43e01bdd7ffa5c1b023e9add7085a8b_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240416-yzywyadb2v

  • MD5

    f43e01bdd7ffa5c1b023e9add7085a8b

  • SHA1

    b279c4ceb6e62f5f01f0a033f2733771ed159223

  • SHA256

    e00944f0f776f689f24f4940d5a676f6d5344bbe6775296af6e9b90945b4ba22

  • SHA512

    cb6fe849f1a368d228c19f1704c5a55ce0ead415464b8850b00480629a218f1402cd71e56372f88562a1ccfa301d3fc0187c00cd10e383f6f7098ac88b6edd61

  • SSDEEP

    49152:UMfm9EugiVrTvTW3+t3fXxsIKPq8fTsEri:UBqLwvhs5PrW

Malware Config

Targets

    • Target

      f43e01bdd7ffa5c1b023e9add7085a8b_JaffaCakes118

    • Size

      1.6MB

    • MD5

      f43e01bdd7ffa5c1b023e9add7085a8b

    • SHA1

      b279c4ceb6e62f5f01f0a033f2733771ed159223

    • SHA256

      e00944f0f776f689f24f4940d5a676f6d5344bbe6775296af6e9b90945b4ba22

    • SHA512

      cb6fe849f1a368d228c19f1704c5a55ce0ead415464b8850b00480629a218f1402cd71e56372f88562a1ccfa301d3fc0187c00cd10e383f6f7098ac88b6edd61

    • SSDEEP

      49152:UMfm9EugiVrTvTW3+t3fXxsIKPq8fTsEri:UBqLwvhs5PrW

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks