Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    22649b5369179871788603682d0fd703_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240508-arcrqsgf8z

  • MD5

    22649b5369179871788603682d0fd703

  • SHA1

    d4d2876fe3fa681f349dfa007fcd19fa1bd36347

  • SHA256

    ecbc4004c9a82bfd3de2ffee4e450d64c54b046f106b523953c8c96e35e84acc

  • SHA512

    c32e991d583ebeff058ffcbe9f899efa94f1c9cda6a28fc6d0d958e05555f9d4fb0b710a5b0786a8bfc8aa3cf82d3f80e4d9fba69605b09e60921f918e300062

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtx:Lz071uv4BPMkibTIA5I4TNrpDGgDQzR

Malware Config

Targets

    • Target

      22649b5369179871788603682d0fd703_JaffaCakes118

    • Size

      1.7MB

    • MD5

      22649b5369179871788603682d0fd703

    • SHA1

      d4d2876fe3fa681f349dfa007fcd19fa1bd36347

    • SHA256

      ecbc4004c9a82bfd3de2ffee4e450d64c54b046f106b523953c8c96e35e84acc

    • SHA512

      c32e991d583ebeff058ffcbe9f899efa94f1c9cda6a28fc6d0d958e05555f9d4fb0b710a5b0786a8bfc8aa3cf82d3f80e4d9fba69605b09e60921f918e300062

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtx:Lz071uv4BPMkibTIA5I4TNrpDGgDQzR

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks