Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    000a302a887a48f0fc87462e889f1b7c_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240425-zkqsfsee4y

  • MD5

    000a302a887a48f0fc87462e889f1b7c

  • SHA1

    581d61f4f2609e199435a038a7c7f45fd64b247f

  • SHA256

    460cac743947cd7fb81c1ec64b0282f1ea7ace53b921bb113e944e2cae3c1b74

  • SHA512

    a177d20d3c26545a31b3149faeca078d021d13e3a8e39e8bf4d63dfe874ec0fa7ac3a591f01091b76174ffd182080250b3a0cae47ad80c95d1903f789e2c70ea

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1Vi:NABR

Score
10/10

Malware Config

Targets

    • Target

      000a302a887a48f0fc87462e889f1b7c_JaffaCakes118

    • Size

      1.9MB

    • MD5

      000a302a887a48f0fc87462e889f1b7c

    • SHA1

      581d61f4f2609e199435a038a7c7f45fd64b247f

    • SHA256

      460cac743947cd7fb81c1ec64b0282f1ea7ace53b921bb113e944e2cae3c1b74

    • SHA512

      a177d20d3c26545a31b3149faeca078d021d13e3a8e39e8bf4d63dfe874ec0fa7ac3a591f01091b76174ffd182080250b3a0cae47ad80c95d1903f789e2c70ea

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1Vi:NABR

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks