Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    059c1363bac26e65520c47da47d21b16_JaffaCakes118

  • Size

    208KB

  • Sample

    240620-nnyfxsvfkg

  • MD5

    059c1363bac26e65520c47da47d21b16

  • SHA1

    34ceaad5ee9178fa58c10f2031638b4ab70d2650

  • SHA256

    a8430771ca865a3aef81e0b6547f56f7970dac4169aaa0fbc34c4ae7c74f1931

  • SHA512

    66e34219203417db428a44d43a547172ac28a0649cb736b5fb95a837fe6299a799dcea2bb12701631dab24b81cbd891f57cd6d204d76df19ce7149f17fac2eb0

  • SSDEEP

    6144:w85qIz6+naOZcx6w+TDsRAV0PHK547HRSV:VqIz6XOklNRAV0Pqa9S

Score
7/10

Malware Config

Targets

    • Target

      059c1363bac26e65520c47da47d21b16_JaffaCakes118

    • Size

      208KB

    • MD5

      059c1363bac26e65520c47da47d21b16

    • SHA1

      34ceaad5ee9178fa58c10f2031638b4ab70d2650

    • SHA256

      a8430771ca865a3aef81e0b6547f56f7970dac4169aaa0fbc34c4ae7c74f1931

    • SHA512

      66e34219203417db428a44d43a547172ac28a0649cb736b5fb95a837fe6299a799dcea2bb12701631dab24b81cbd891f57cd6d204d76df19ce7149f17fac2eb0

    • SSDEEP

      6144:w85qIz6+naOZcx6w+TDsRAV0PHK547HRSV:VqIz6XOklNRAV0Pqa9S

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks