Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01565253bcdef0f3fcaf57e128ceed1b_JaffaCakes118

  • Size

    15KB

  • Sample

    240620-addrwaxhqf

  • MD5

    01565253bcdef0f3fcaf57e128ceed1b

  • SHA1

    08acd74c35b7e9fd0031a414275af3d90fd029e8

  • SHA256

    674049156118fb5825b23bbec90bbf45206bff87500c2e737ce3e39c2aafa821

  • SHA512

    b648b0cef885c08a6d7393ca312bffd81ef0a24fbc9f1e8dc1136c6b95ea89d70b5db1eee25bf832de2af0920ea6b87883f4c768298a637d6d37dc2512e7d13d

  • SSDEEP

    384:/TxnIAW4urbiml2WAGVF3Y4Eux0Dzh8WaWw3tKGdb:/V7YXDl5P3MNb89R

Malware Config

Targets

    • Target

      01565253bcdef0f3fcaf57e128ceed1b_JaffaCakes118

    • Size

      15KB

    • MD5

      01565253bcdef0f3fcaf57e128ceed1b

    • SHA1

      08acd74c35b7e9fd0031a414275af3d90fd029e8

    • SHA256

      674049156118fb5825b23bbec90bbf45206bff87500c2e737ce3e39c2aafa821

    • SHA512

      b648b0cef885c08a6d7393ca312bffd81ef0a24fbc9f1e8dc1136c6b95ea89d70b5db1eee25bf832de2af0920ea6b87883f4c768298a637d6d37dc2512e7d13d

    • SSDEEP

      384:/TxnIAW4urbiml2WAGVF3Y4Eux0Dzh8WaWw3tKGdb:/V7YXDl5P3MNb89R

    • Disables RegEdit via registry modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks