Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    83aecbaf22ddb81581135c6842b64993_JaffaCakes118

  • Size

    165KB

  • Sample

    240530-k5dajadf83

  • MD5

    83aecbaf22ddb81581135c6842b64993

  • SHA1

    18d66eeb2b9f4309a64ab392c6317065d96c54c0

  • SHA256

    711fec5eed05597367e1f41cd1c83c4a4a3ee9b1c75396d3302080e2ffa2f2ea

  • SHA512

    cd837728cfb243fbe8beb84abfe95792edf69dcee22cca772096c61af8dd21e312599969e30c178131c0f854f66c17b434095956738e9894711d7154ed2e80b4

  • SSDEEP

    3072:ZQL5y/lonyfkMY+BES09JXAnyrZalI+YToMKPTB:xSysMYod+X3oI+YToMKPTB

Malware Config

Targets

    • Target

      83aecbaf22ddb81581135c6842b64993_JaffaCakes118

    • Size

      165KB

    • MD5

      83aecbaf22ddb81581135c6842b64993

    • SHA1

      18d66eeb2b9f4309a64ab392c6317065d96c54c0

    • SHA256

      711fec5eed05597367e1f41cd1c83c4a4a3ee9b1c75396d3302080e2ffa2f2ea

    • SHA512

      cd837728cfb243fbe8beb84abfe95792edf69dcee22cca772096c61af8dd21e312599969e30c178131c0f854f66c17b434095956738e9894711d7154ed2e80b4

    • SSDEEP

      3072:ZQL5y/lonyfkMY+BES09JXAnyrZalI+YToMKPTB:xSysMYod+X3oI+YToMKPTB

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks