Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    14c96515e5f9b061f2e08b03fa8fa0b1_JaffaCakes118

  • Size

    92KB

  • Sample

    240627-fvfkpawfrq

  • MD5

    14c96515e5f9b061f2e08b03fa8fa0b1

  • SHA1

    50b8641883d37bcd138bc57d5a4dbe1b4e72ae12

  • SHA256

    1bdfd21bec06b3724713461f7a309af917c43db0701785a4f4c7e48bba5e5960

  • SHA512

    53177fb0c342ad479c17bf594c92af8337357675ea06452aaa0a23e2d0cebc61ef27c7779348249d8adad5011347579bc7cf9493866d355f9e50fae3f1bb9e67

  • SSDEEP

    1536:fqGmP01NWE4GD1/K1amycsOR9kSOntHTEgN8uDQeLWt4m2mO3op5UgqB6GIIytxv:fqfP0L5f1y1Xsqk9n9TEilJLg2Lm+B63

Malware Config

Targets

    • Target

      14c96515e5f9b061f2e08b03fa8fa0b1_JaffaCakes118

    • Size

      92KB

    • MD5

      14c96515e5f9b061f2e08b03fa8fa0b1

    • SHA1

      50b8641883d37bcd138bc57d5a4dbe1b4e72ae12

    • SHA256

      1bdfd21bec06b3724713461f7a309af917c43db0701785a4f4c7e48bba5e5960

    • SHA512

      53177fb0c342ad479c17bf594c92af8337357675ea06452aaa0a23e2d0cebc61ef27c7779348249d8adad5011347579bc7cf9493866d355f9e50fae3f1bb9e67

    • SSDEEP

      1536:fqGmP01NWE4GD1/K1amycsOR9kSOntHTEgN8uDQeLWt4m2mO3op5UgqB6GIIytxv:fqfP0L5f1y1Xsqk9n9TEilJLg2Lm+B63

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies WinLogon

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Users

MITRE ATT&CK Enterprise v15

Tasks