Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0e7d1f0b10cc306ef418275ead77522d_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240625-sbzwfazblp

  • MD5

    0e7d1f0b10cc306ef418275ead77522d

  • SHA1

    31a87750d5fbbcc7cf37a496f3598cd5fb9826e2

  • SHA256

    113239ad00d6833cbda39e1528ac96d26606cc464f708e691d07953272706b40

  • SHA512

    d45812a05f8cf2f37662b6b91ab63d886bc51cf57c196104af4710593143b5fa8c159094edeb1586e57037909544c6a0b5540f2bbb7be8137f6f6674ce1823da

  • SSDEEP

    24576:MUm8aewsAjdx/WnSyhbzv8O0tlYjboGxZqwijaahIJpX:MUwljnWSytLdalYvoGxUSJpX

Malware Config

Targets

    • Target

      0e7d1f0b10cc306ef418275ead77522d_JaffaCakes118

    • Size

      1.6MB

    • MD5

      0e7d1f0b10cc306ef418275ead77522d

    • SHA1

      31a87750d5fbbcc7cf37a496f3598cd5fb9826e2

    • SHA256

      113239ad00d6833cbda39e1528ac96d26606cc464f708e691d07953272706b40

    • SHA512

      d45812a05f8cf2f37662b6b91ab63d886bc51cf57c196104af4710593143b5fa8c159094edeb1586e57037909544c6a0b5540f2bbb7be8137f6f6674ce1823da

    • SSDEEP

      24576:MUm8aewsAjdx/WnSyhbzv8O0tlYjboGxZqwijaahIJpX:MUwljnWSytLdalYvoGxUSJpX

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks