Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0dc0b7419b8dec868e19598facdfdf83_JaffaCakes118

  • Size

    189KB

  • Sample

    240502-g78yfabd5t

  • MD5

    0dc0b7419b8dec868e19598facdfdf83

  • SHA1

    5d1b0da467b8743cf4864bb6a47c57ebb0788fa7

  • SHA256

    46565ae62aa1230064aef983af682888593a5e75a62c66091255e0eb721c6cbc

  • SHA512

    98072dc9ba8cbd4dfe2a249f3e5aee44c404b3b40fae429780bbf20e085f23e796eb749bfe63ea24696dab8bfc5590ca8c6a7be864eec8ee5a380f38dddfceee

  • SSDEEP

    3072:LyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:usMYod+X3oI+YS1tA8

Malware Config

Targets

    • Target

      0dc0b7419b8dec868e19598facdfdf83_JaffaCakes118

    • Size

      189KB

    • MD5

      0dc0b7419b8dec868e19598facdfdf83

    • SHA1

      5d1b0da467b8743cf4864bb6a47c57ebb0788fa7

    • SHA256

      46565ae62aa1230064aef983af682888593a5e75a62c66091255e0eb721c6cbc

    • SHA512

      98072dc9ba8cbd4dfe2a249f3e5aee44c404b3b40fae429780bbf20e085f23e796eb749bfe63ea24696dab8bfc5590ca8c6a7be864eec8ee5a380f38dddfceee

    • SSDEEP

      3072:LyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:usMYod+X3oI+YS1tA8

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks