Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17546c6eefe30582794148e2c44b139f_JaffaCakes118

  • Size

    183KB

  • Sample

    240627-ypzqgszfnp

  • MD5

    17546c6eefe30582794148e2c44b139f

  • SHA1

    174834367ee22cb6a8363bcfffb35721bf704292

  • SHA256

    18fb20ed7ff9283ccc1bc57009a2b386120b62a3160c3a29e71224a7985814a9

  • SHA512

    d15e1640de3b98567025f71f7b2070087b6b362fd5ba752ffd9db12985d5f3222cb67848ceeec3fa66413cedc3373e2b206ee84d9e19c693ae98ca39fcef25ea

  • SSDEEP

    3072:DQIURTXJ+MMrO+zWsLU9HmWAjT2T8upS8XyrdxhDRGChzjq40IiZS6nbSmujGlaU:Ds9Az9UtpTjfIdRXP0Iis6nkGVr

Score
7/10

Malware Config

Targets

    • Target

      17546c6eefe30582794148e2c44b139f_JaffaCakes118

    • Size

      183KB

    • MD5

      17546c6eefe30582794148e2c44b139f

    • SHA1

      174834367ee22cb6a8363bcfffb35721bf704292

    • SHA256

      18fb20ed7ff9283ccc1bc57009a2b386120b62a3160c3a29e71224a7985814a9

    • SHA512

      d15e1640de3b98567025f71f7b2070087b6b362fd5ba752ffd9db12985d5f3222cb67848ceeec3fa66413cedc3373e2b206ee84d9e19c693ae98ca39fcef25ea

    • SSDEEP

      3072:DQIURTXJ+MMrO+zWsLU9HmWAjT2T8upS8XyrdxhDRGChzjq40IiZS6nbSmujGlaU:Ds9Az9UtpTjfIdRXP0Iis6nkGVr

    Score
    7/10
    • Loads dropped DLL

    • Drops file in System32 directory

    • Target

      $WINDIR/system32/tmrllozg.dll

    • Size

      183KB

    • MD5

      440dd855fbe2c10aa8fa70f09cb208ec

    • SHA1

      5499a0ee810cc7d4deeb48b7b394c3bfb3f935fd

    • SHA256

      4e354cd5d03c9cec1754ad60748fe35369b8fa50d870e28026835f84b8143a09

    • SHA512

      41a6ac3d2bf2f6d29a05a92aa20a25b4f80182c06ecab506931c477b06fc0b41f5cc3c9cc5a3e3c3204449fb31116f26d2678844d0933383272645dd9b817d7f

    • SSDEEP

      3072:zflWIEwdj3sFFRG5T3fW8B+iiKOXg5ux9UPrJlT+M2/KoMa6zWt+Fvf/zInSLZSc:ZYNG5TPLB+IOX+w9UDr+HfEWU/zZz

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks