Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118

  • Size

    175KB

  • Sample

    240528-mkr93agg65

  • MD5

    7ca4228dd9cc14b1b5d9938c6ed1b144

  • SHA1

    fb014a7813256c848e97007a7705f355bcf40576

  • SHA256

    009081468aa09b402378444010fd772036dbefb92c839179c69cdbcb23133a33

  • SHA512

    4624c77c3fc301538d33d6f25ceebbbd7cebf1c17bd0c59b7fb36913fcd32c5f9f9447f96f1ac01f4af60f6e9e951d03df22594a342e9aae62be41d9e12a67e9

  • SSDEEP

    1536:trdi1Ir77zOH98Wj2gpngx+a9zGmLtHrj:trfrzOH98ipgfFrj

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://haikouweixun.com/jn5/Rbp/

exe.dropper

http://carolinacanullo.com/js/hllPT/

exe.dropper

http://megasolucoesti.com/R9KDq0O8w/B3KqPpe/

exe.dropper

http://www.insulution.org/wp-admin/swift/swift/y318LGM/

exe.dropper

http://petafilm.com/calendar/6kOpwrt/

exe.dropper

https://dev.contractdevs.co.uk/hbbny/Kv9/

exe.dropper

http://blog.penmman.com/wp-content/uploads/1ECbn9K/

Targets

    • Target

      7ca4228dd9cc14b1b5d9938c6ed1b144_JaffaCakes118

    • Size

      175KB

    • MD5

      7ca4228dd9cc14b1b5d9938c6ed1b144

    • SHA1

      fb014a7813256c848e97007a7705f355bcf40576

    • SHA256

      009081468aa09b402378444010fd772036dbefb92c839179c69cdbcb23133a33

    • SHA512

      4624c77c3fc301538d33d6f25ceebbbd7cebf1c17bd0c59b7fb36913fcd32c5f9f9447f96f1ac01f4af60f6e9e951d03df22594a342e9aae62be41d9e12a67e9

    • SSDEEP

      1536:trdi1Ir77zOH98Wj2gpngx+a9zGmLtHrj:trfrzOH98ipgfFrj

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks