Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    03d07d05cd58a72933395a3073b9fe40_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240427-2vv62aad89

  • MD5

    03d07d05cd58a72933395a3073b9fe40

  • SHA1

    af86ecf3a1b2d868977348a5fa5841a553005832

  • SHA256

    1c0cb2ed8d6b87d6a4eef8d423969d9c41f3f4d0401637cbdd75ed62a12be13e

  • SHA512

    bf52bb31f3571a4d3ec85ba0318eb7d412093703dd2db348e69dfc0a3e6d9604534398907aba5954923c2fe845bbbff77284eee0408d71d2f0e3f06c964d15fb

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafws1PO:NABL

Score
10/10

Malware Config

Targets

    • Target

      03d07d05cd58a72933395a3073b9fe40_JaffaCakes118

    • Size

      2.1MB

    • MD5

      03d07d05cd58a72933395a3073b9fe40

    • SHA1

      af86ecf3a1b2d868977348a5fa5841a553005832

    • SHA256

      1c0cb2ed8d6b87d6a4eef8d423969d9c41f3f4d0401637cbdd75ed62a12be13e

    • SHA512

      bf52bb31f3571a4d3ec85ba0318eb7d412093703dd2db348e69dfc0a3e6d9604534398907aba5954923c2fe845bbbff77284eee0408d71d2f0e3f06c964d15fb

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafws1PO:NABL

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks