Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08e579a367bd345c80c3dd2d28d501af_JaffaCakes118

  • Size

    247KB

  • Sample

    240620-xp1gcasgqa

  • MD5

    08e579a367bd345c80c3dd2d28d501af

  • SHA1

    06b48d398279b73108478007c26bebce4fdcd115

  • SHA256

    a03d411ac798202d63acc18bb582eece1f6cc7eff288210839f7fd1d1079927c

  • SHA512

    825f551a824c642cee405d0bcaf273a7e784d359e9d1caffcbbd28243eda5baeaf15f34bc1255c8eabdacfc995fa64fe7ab65f12c0a9196595481893a325bc78

  • SSDEEP

    6144:/53OoEydXliRKiyVaQcgsVsJnniQQrzg0sroS:1OonIRKDsQcgsVspniVr8lroS

Score
10/10

Malware Config

Targets

    • Target

      08e579a367bd345c80c3dd2d28d501af_JaffaCakes118

    • Size

      247KB

    • MD5

      08e579a367bd345c80c3dd2d28d501af

    • SHA1

      06b48d398279b73108478007c26bebce4fdcd115

    • SHA256

      a03d411ac798202d63acc18bb582eece1f6cc7eff288210839f7fd1d1079927c

    • SHA512

      825f551a824c642cee405d0bcaf273a7e784d359e9d1caffcbbd28243eda5baeaf15f34bc1255c8eabdacfc995fa64fe7ab65f12c0a9196595481893a325bc78

    • SSDEEP

      6144:/53OoEydXliRKiyVaQcgsVsJnniQQrzg0sroS:1OonIRKDsQcgsVspniVr8lroS

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks