Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f4d405135765456dc74052b85ebb5264_JaffaCakes118

  • Size

    86KB

  • Sample

    240417-cstgzscf5w

  • MD5

    f4d405135765456dc74052b85ebb5264

  • SHA1

    5c878e84fe84205de6992eb352f1640d72b655ab

  • SHA256

    9a6748322029ca89ebb14592ca045af64100b1523408d2ab1cbeba367064a423

  • SHA512

    db94e02bd440521efe37141ada59644b0543aee0a984e1939c7212f40708bedaeb092efeb4b57c9b356ff765d9d3f20fd57b30cbb028df163540ad246c8aab9f

  • SSDEEP

    1536:pJOOmiYbPyOprqK5fJA+VRJgafBNyYxd+3xAm6mB:pvmPbPbNq2jVRJgsBjxQ9

Score
7/10

Malware Config

Targets

    • Target

      f4d405135765456dc74052b85ebb5264_JaffaCakes118

    • Size

      86KB

    • MD5

      f4d405135765456dc74052b85ebb5264

    • SHA1

      5c878e84fe84205de6992eb352f1640d72b655ab

    • SHA256

      9a6748322029ca89ebb14592ca045af64100b1523408d2ab1cbeba367064a423

    • SHA512

      db94e02bd440521efe37141ada59644b0543aee0a984e1939c7212f40708bedaeb092efeb4b57c9b356ff765d9d3f20fd57b30cbb028df163540ad246c8aab9f

    • SSDEEP

      1536:pJOOmiYbPyOprqK5fJA+VRJgafBNyYxd+3xAm6mB:pvmPbPbNq2jVRJgsBjxQ9

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks