Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0671b2e9a8db09eeaaa02c92b92eb0d0_JaffaCakes118

  • Size

    236KB

  • Sample

    240620-qsrv2svajk

  • MD5

    0671b2e9a8db09eeaaa02c92b92eb0d0

  • SHA1

    4d084479ccac3475af3ed43403e382453df87311

  • SHA256

    fca10956890bd68948b39ddf0a84a3784468a0f738878606bba0ee3a2755c15c

  • SHA512

    a9a1a6313b4c01775fce3389935a852bbaa48a1153d185ca4819a487e9af8b0e103ea19a7a85c319d83d927feebf22c5002ff63cd335029f090997faf446d79c

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIA:+Qj9U3jwO3rt5/

Score
10/10

Malware Config

Targets

    • Target

      0671b2e9a8db09eeaaa02c92b92eb0d0_JaffaCakes118

    • Size

      236KB

    • MD5

      0671b2e9a8db09eeaaa02c92b92eb0d0

    • SHA1

      4d084479ccac3475af3ed43403e382453df87311

    • SHA256

      fca10956890bd68948b39ddf0a84a3784468a0f738878606bba0ee3a2755c15c

    • SHA512

      a9a1a6313b4c01775fce3389935a852bbaa48a1153d185ca4819a487e9af8b0e103ea19a7a85c319d83d927feebf22c5002ff63cd335029f090997faf446d79c

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIA:+Qj9U3jwO3rt5/

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks