Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f4f3a5521a3461f8d9832113621716d7_JaffaCakes118

  • Size

    241KB

  • Sample

    240417-d66vxaeb7v

  • MD5

    f4f3a5521a3461f8d9832113621716d7

  • SHA1

    76392062940711409b38f79aca6056a6c9d22d01

  • SHA256

    366d345be3c01639c389db383b4e882ba12c434e1e56226d69a7765bf107fee6

  • SHA512

    5d3f5906b97026e103e55096a7b9364a245264de75b758036587891c8254b13467333886ee364422193ecee22d62e6d0e4686e732c3fae0d58bde167fea79725

  • SSDEEP

    6144:H2US0QIGlkBKmIJasMbwzigFBrGP/cIbkkb:H2US0QIGlOKmSOb0fFdGsIYs

Score
7/10

Malware Config

Targets

    • Target

      f4f3a5521a3461f8d9832113621716d7_JaffaCakes118

    • Size

      241KB

    • MD5

      f4f3a5521a3461f8d9832113621716d7

    • SHA1

      76392062940711409b38f79aca6056a6c9d22d01

    • SHA256

      366d345be3c01639c389db383b4e882ba12c434e1e56226d69a7765bf107fee6

    • SHA512

      5d3f5906b97026e103e55096a7b9364a245264de75b758036587891c8254b13467333886ee364422193ecee22d62e6d0e4686e732c3fae0d58bde167fea79725

    • SSDEEP

      6144:H2US0QIGlkBKmIJasMbwzigFBrGP/cIbkkb:H2US0QIGlOKmSOb0fFdGsIYs

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks