Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    00f0956d03a0c0a019582b1c6236ca8a_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240426-rf1g4adh8s

  • MD5

    00f0956d03a0c0a019582b1c6236ca8a

  • SHA1

    dd6ecd8ab3057e1306f47fd71cbdca8694113f15

  • SHA256

    92c0c613740eb5253c2cadf5282c112c3cb0125b7553d384102ceea5f120ade7

  • SHA512

    2ef4bdbe4d92f64585972bc89399e2b17a6ab310c88ab725302f201002a7a4c06c651023ea89dd9508bdf7fc90ec61022b3558942362c242c69a60decf58d880

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSO2:knw9oUUEEDlGUh+hN2

Score
10/10

Malware Config

Targets

    • Target

      00f0956d03a0c0a019582b1c6236ca8a_JaffaCakes118

    • Size

      1.3MB

    • MD5

      00f0956d03a0c0a019582b1c6236ca8a

    • SHA1

      dd6ecd8ab3057e1306f47fd71cbdca8694113f15

    • SHA256

      92c0c613740eb5253c2cadf5282c112c3cb0125b7553d384102ceea5f120ade7

    • SHA512

      2ef4bdbe4d92f64585972bc89399e2b17a6ab310c88ab725302f201002a7a4c06c651023ea89dd9508bdf7fc90ec61022b3558942362c242c69a60decf58d880

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSO2:knw9oUUEEDlGUh+hN2

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks