Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0e7f473a640b596415c01375739c356e_JaffaCakes118

  • Size

    100KB

  • Sample

    240625-sdbxdswgpc

  • MD5

    0e7f473a640b596415c01375739c356e

  • SHA1

    97beb75e5a6a223ed4c8d937838f5cde627589bd

  • SHA256

    d4235c1603e10f7b2876114d18cfcd590c612141662f4ea53721cef2839533da

  • SHA512

    5540e3938435b728577dd1e2c8b8d596e0604516c9d5cce3926b88edc334f5b8ac7267bc053dc42cb347187a426267d66453239e37961d969aa9efafe091fd0a

  • SSDEEP

    3072:JgrwDH6CZtRfrg7ZCmrlmaYY9Wqfgo2Y:SwT6CZtRzg7LrD79W7Y

Malware Config

Targets

    • Target

      0e7f473a640b596415c01375739c356e_JaffaCakes118

    • Size

      100KB

    • MD5

      0e7f473a640b596415c01375739c356e

    • SHA1

      97beb75e5a6a223ed4c8d937838f5cde627589bd

    • SHA256

      d4235c1603e10f7b2876114d18cfcd590c612141662f4ea53721cef2839533da

    • SHA512

      5540e3938435b728577dd1e2c8b8d596e0604516c9d5cce3926b88edc334f5b8ac7267bc053dc42cb347187a426267d66453239e37961d969aa9efafe091fd0a

    • SSDEEP

      3072:JgrwDH6CZtRfrg7ZCmrlmaYY9Wqfgo2Y:SwT6CZtRzg7LrD79W7Y

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks