Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0b3a53ec25edfaacd5714245f96aa961_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240501-gvvkaahf7z

  • MD5

    0b3a53ec25edfaacd5714245f96aa961

  • SHA1

    333634d7925abf54d204fd30db806643a22b3051

  • SHA256

    527317bebc4b27aa2bfdc72c548312bda57800b0062aa1ace6ad7fc3869afb18

  • SHA512

    a3962ddabb1799509a9d82c218d6109448c16f7499cf12a7cf05749db0e1926e4eb60c26d13bffeb8444bda744fa00a4a2e8e520789874ae6b96505277cd8810

  • SSDEEP

    98304:6Fu2QprAfsDm5Z0WCqXlU+C8AprN40Mr7ugHE:SIrAsWDXlY8o606lHE

Score
10/10

Malware Config

Targets

    • Target

      0b3a53ec25edfaacd5714245f96aa961_JaffaCakes118

    • Size

      3.4MB

    • MD5

      0b3a53ec25edfaacd5714245f96aa961

    • SHA1

      333634d7925abf54d204fd30db806643a22b3051

    • SHA256

      527317bebc4b27aa2bfdc72c548312bda57800b0062aa1ace6ad7fc3869afb18

    • SHA512

      a3962ddabb1799509a9d82c218d6109448c16f7499cf12a7cf05749db0e1926e4eb60c26d13bffeb8444bda744fa00a4a2e8e520789874ae6b96505277cd8810

    • SSDEEP

      98304:6Fu2QprAfsDm5Z0WCqXlU+C8AprN40Mr7ugHE:SIrAsWDXlY8o606lHE

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks