Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    09d43c3de68ba9783ea0e9dbfe08fe78_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240430-qbqawshc69

  • MD5

    09d43c3de68ba9783ea0e9dbfe08fe78

  • SHA1

    bb6d7f245b0125a9df628f938849858a516373a4

  • SHA256

    28549655067aac3c537e6bf623d61fc0662c40374614895862a581c3f1e243aa

  • SHA512

    5c6c2b13b6a06f01f31675ef19f9705fd2c8a761db4863c342360eed4848fbd5945b11894eb09a357342ab86d99eadedb37394e2f9325d41ef46692a41b268c4

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qre:NABp

Score
10/10

Malware Config

Targets

    • Target

      09d43c3de68ba9783ea0e9dbfe08fe78_JaffaCakes118

    • Size

      2.1MB

    • MD5

      09d43c3de68ba9783ea0e9dbfe08fe78

    • SHA1

      bb6d7f245b0125a9df628f938849858a516373a4

    • SHA256

      28549655067aac3c537e6bf623d61fc0662c40374614895862a581c3f1e243aa

    • SHA512

      5c6c2b13b6a06f01f31675ef19f9705fd2c8a761db4863c342360eed4848fbd5945b11894eb09a357342ab86d99eadedb37394e2f9325d41ef46692a41b268c4

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qre:NABp

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks