Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8ae30c8be4625767a1073a1912136e2c_JaffaCakes118

  • Size

    25.5MB

  • Sample

    240601-st5veafe4y

  • MD5

    8ae30c8be4625767a1073a1912136e2c

  • SHA1

    227fe088986be2a394fc3ba9e6f4a992a08759e0

  • SHA256

    8f6722c6c0a66019a2c43bfe55fac96d32195b7ae295cc848fa1205b8ce2c649

  • SHA512

    3f87ded5e2d481dc5a0ec0445dac0afe2aaf004e3b0aff3b0edacf70b602011cf8f215757edcd2516a39715358f4672c0f27e235e9035b860247ee5ff1639c45

  • SSDEEP

    98304:XX77GBfWfaOCzIDQOl/1sYOXwnS4rVPS9mKV:vGBfWYuQo1BIBmKV

Malware Config

Targets

    • Target

      8ae30c8be4625767a1073a1912136e2c_JaffaCakes118

    • Size

      25.5MB

    • MD5

      8ae30c8be4625767a1073a1912136e2c

    • SHA1

      227fe088986be2a394fc3ba9e6f4a992a08759e0

    • SHA256

      8f6722c6c0a66019a2c43bfe55fac96d32195b7ae295cc848fa1205b8ce2c649

    • SHA512

      3f87ded5e2d481dc5a0ec0445dac0afe2aaf004e3b0aff3b0edacf70b602011cf8f215757edcd2516a39715358f4672c0f27e235e9035b860247ee5ff1639c45

    • SSDEEP

      98304:XX77GBfWfaOCzIDQOl/1sYOXwnS4rVPS9mKV:vGBfWYuQo1BIBmKV

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks