Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118

  • Size

    156KB

  • Sample

    240429-fghg5abb8x

  • MD5

    06daa59ddbc7ac4a32d68392b198c544

  • SHA1

    63ee78c881f586b47d0c9367f594c3fa816e5252

  • SHA256

    3b8a3207308627a9b0f0799f3c943ec93902d4871c3ed5ab2d3b4ca41f288016

  • SHA512

    06ad7b1ca8e81a009913fea045053f99baa3e9f524872db744f6275ac511ce16ae5c4a03257253eff48ac772024aa546769428d5a0ce0c5ef6bf36be2a75c6e3

  • SSDEEP

    3072:X1B31bdBob2QX+g4ETj3SCfOUHgUQ+UnlPMWxEvlmbgn9yqeMWycAd8l:X731bdBaB+gp3BOqLQ+UlIvlmbgn9VJW

Score
10/10

Malware Config

Targets

    • Target

      06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118

    • Size

      156KB

    • MD5

      06daa59ddbc7ac4a32d68392b198c544

    • SHA1

      63ee78c881f586b47d0c9367f594c3fa816e5252

    • SHA256

      3b8a3207308627a9b0f0799f3c943ec93902d4871c3ed5ab2d3b4ca41f288016

    • SHA512

      06ad7b1ca8e81a009913fea045053f99baa3e9f524872db744f6275ac511ce16ae5c4a03257253eff48ac772024aa546769428d5a0ce0c5ef6bf36be2a75c6e3

    • SSDEEP

      3072:X1B31bdBob2QX+g4ETj3SCfOUHgUQ+UnlPMWxEvlmbgn9yqeMWycAd8l:X731bdBaB+gp3BOqLQ+UlIvlmbgn9VJW

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks