Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0882516b84fdc5d23fd24b5fc90ff8db_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240429-3nk8xsdg94

  • MD5

    0882516b84fdc5d23fd24b5fc90ff8db

  • SHA1

    161abd59aac3fb3fd0d401848e4edf210f8deb94

  • SHA256

    a245a1254bcb2fa0a63480d7a36f8fb5de18fc95f8ca8c639faa0e57a1732958

  • SHA512

    e99bbd028f7629b1705978f23af453990a3f7ae3a3df8c3d4fa47e97e25bd6625f68175e33a1c8e5428a751f5c926509a6cce2a1ab91fde24670f5059b96f3b0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlF+:NABr

Score
10/10

Malware Config

Targets

    • Target

      0882516b84fdc5d23fd24b5fc90ff8db_JaffaCakes118

    • Size

      1.9MB

    • MD5

      0882516b84fdc5d23fd24b5fc90ff8db

    • SHA1

      161abd59aac3fb3fd0d401848e4edf210f8deb94

    • SHA256

      a245a1254bcb2fa0a63480d7a36f8fb5de18fc95f8ca8c639faa0e57a1732958

    • SHA512

      e99bbd028f7629b1705978f23af453990a3f7ae3a3df8c3d4fa47e97e25bd6625f68175e33a1c8e5428a751f5c926509a6cce2a1ab91fde24670f5059b96f3b0

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlF+:NABr

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks