Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240619-zt7sbswbrk

  • MD5

    007a3c2f9aba07465a744f0df38b4e08

  • SHA1

    a5bb88664f3e32959b6a30dbbb559bfacb39ead5

  • SHA256

    24f7bc6583a6b8ac8354cb09743202829a0aa5bec6ae6f8ce620d51954cdb479

  • SHA512

    6b84ecc39735b47c946d5d348dcc62ffd3582dbacc4b088301e88ef8f0bf4f62f977629601db23215feea20bb53da52ffdbc96cfeaf9d30d38e8ed3a7cbe2c4c

  • SSDEEP

    384:WPyZNjtU2mO4JDNs6WpTIWbjhzTVIrjBNCzElE4vl:WyZv6NXeschzaXDiElEC

Malware Config

Targets

    • Target

      007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118

    • Size

      1.0MB

    • MD5

      007a3c2f9aba07465a744f0df38b4e08

    • SHA1

      a5bb88664f3e32959b6a30dbbb559bfacb39ead5

    • SHA256

      24f7bc6583a6b8ac8354cb09743202829a0aa5bec6ae6f8ce620d51954cdb479

    • SHA512

      6b84ecc39735b47c946d5d348dcc62ffd3582dbacc4b088301e88ef8f0bf4f62f977629601db23215feea20bb53da52ffdbc96cfeaf9d30d38e8ed3a7cbe2c4c

    • SSDEEP

      384:WPyZNjtU2mO4JDNs6WpTIWbjhzTVIrjBNCzElE4vl:WyZv6NXeschzaXDiElEC

    • Modifies firewall policy service

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks