Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f8785b58b747d153eaf7621bbf780b58_JaffaCakes118

  • Size

    1020KB

  • Sample

    240418-wc5d4aaf84

  • MD5

    f8785b58b747d153eaf7621bbf780b58

  • SHA1

    45a14159f49ffbf4e123b4b248078196e397af31

  • SHA256

    e32fd58f8e2c3177173c794fdede490670156ac621a94d3188f1d8feaf0eaf66

  • SHA512

    b518c4f573e7df5e613761af63e48d0055c573d73b56bfe70180e01f9786d4c0bbb82d9319cf15decfd85cbb7a484259053138a69e537608f5fafdddce8348c3

  • SSDEEP

    768:dhZXGOljyAynGPiQ0Mak4g9nmO9PGr0o+tIJDej:nZlleAjPiQjf4EmQPGrL+Kde

Malware Config

Targets

    • Target

      f8785b58b747d153eaf7621bbf780b58_JaffaCakes118

    • Size

      1020KB

    • MD5

      f8785b58b747d153eaf7621bbf780b58

    • SHA1

      45a14159f49ffbf4e123b4b248078196e397af31

    • SHA256

      e32fd58f8e2c3177173c794fdede490670156ac621a94d3188f1d8feaf0eaf66

    • SHA512

      b518c4f573e7df5e613761af63e48d0055c573d73b56bfe70180e01f9786d4c0bbb82d9319cf15decfd85cbb7a484259053138a69e537608f5fafdddce8348c3

    • SSDEEP

      768:dhZXGOljyAynGPiQ0Mak4g9nmO9PGr0o+tIJDej:nZlleAjPiQjf4EmQPGrL+Kde

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks