Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0a50923a446814ea145e7baccb4766ed_JaffaCakes118

  • Size

    183KB

  • Sample

    240624-xrwwya1ekj

  • MD5

    0a50923a446814ea145e7baccb4766ed

  • SHA1

    533c8bbff6f3d24983ae8c8e116183a3ee7ab7ad

  • SHA256

    2413573ab2f436ba99d9947ef49d540be4f2a682e2e1f2681cfa64b1b8377355

  • SHA512

    e3a7aded7125c4121e00e811bc87acdb32d5d9b7f706d3e1916c0bb0d09744545199f1cf6dabc1047d078c82a22ed03f699cca82e5b46674c088e73363d2b0f4

  • SSDEEP

    3072:sjd2KIXl/sy09rN+Y25Uur6Ku06SBLg2aDY4rmimAIh0qbh1jMVa7V:sjOXl/s99rN+35UnK16SBd8dmRAuvbwu

Malware Config

Targets

    • Target

      0a50923a446814ea145e7baccb4766ed_JaffaCakes118

    • Size

      183KB

    • MD5

      0a50923a446814ea145e7baccb4766ed

    • SHA1

      533c8bbff6f3d24983ae8c8e116183a3ee7ab7ad

    • SHA256

      2413573ab2f436ba99d9947ef49d540be4f2a682e2e1f2681cfa64b1b8377355

    • SHA512

      e3a7aded7125c4121e00e811bc87acdb32d5d9b7f706d3e1916c0bb0d09744545199f1cf6dabc1047d078c82a22ed03f699cca82e5b46674c088e73363d2b0f4

    • SSDEEP

      3072:sjd2KIXl/sy09rN+Y25Uur6Ku06SBLg2aDY4rmimAIh0qbh1jMVa7V:sjOXl/s99rN+35UnK16SBd8dmRAuvbwu

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Server Software Component: Terminal Services DLL

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks