Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06f588f54dea668717613c4f90ad961e_JaffaCakes118

  • Size

    169KB

  • Sample

    240624-b4zmpstema

  • MD5

    06f588f54dea668717613c4f90ad961e

  • SHA1

    61ec0f1d630521855b345ce91433efbf33a95116

  • SHA256

    17432d218dd35ec276a34ab7f633cd4b57051102b598cda43a81279eea8d4ba9

  • SHA512

    2b350f85e861b115383950ea20302b2bd76eb5f25939eb951e42d2a8701ca610ffd5175448c15cb69d3e3bb4c01d516cc03e8d6014f45f02415ff24d381ec3ab

  • SSDEEP

    3072:YGCXtAAR6rwMuw4SJkTuxCHDQbQk2S3eFDaQDdpAQ9vPN8Vd7Cap3kbu7gQZO:zCXDmwMAqCjQck5enuCvPN8VNZxkbtx

Malware Config

Targets

    • Target

      06f588f54dea668717613c4f90ad961e_JaffaCakes118

    • Size

      169KB

    • MD5

      06f588f54dea668717613c4f90ad961e

    • SHA1

      61ec0f1d630521855b345ce91433efbf33a95116

    • SHA256

      17432d218dd35ec276a34ab7f633cd4b57051102b598cda43a81279eea8d4ba9

    • SHA512

      2b350f85e861b115383950ea20302b2bd76eb5f25939eb951e42d2a8701ca610ffd5175448c15cb69d3e3bb4c01d516cc03e8d6014f45f02415ff24d381ec3ab

    • SSDEEP

      3072:YGCXtAAR6rwMuw4SJkTuxCHDQbQk2S3eFDaQDdpAQ9vPN8Vd7Cap3kbu7gQZO:zCXDmwMAqCjQck5enuCvPN8VNZxkbtx

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks