Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1774b8d296dd948fb37afc216b3cc07e_JaffaCakes118

  • Size

    28KB

  • Sample

    240627-zhyqaazdkb

  • MD5

    1774b8d296dd948fb37afc216b3cc07e

  • SHA1

    3be9949773b27cc0fdd47f8c69650804085cfab2

  • SHA256

    beec62cffed38f64b1b55847acbd3845e812010ebde9f507f9e29fd8ffba3a21

  • SHA512

    e09bbe2743228d248310ec582dafa1121205e45c0413cdca723f69fe05b741dd73cd2867ef9d4977c966d6d7383f8be46f4df16221e41f09818c18209aaa1ef5

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIovr:egKcR4mjD9r82e

Malware Config

Targets

    • Target

      1774b8d296dd948fb37afc216b3cc07e_JaffaCakes118

    • Size

      28KB

    • MD5

      1774b8d296dd948fb37afc216b3cc07e

    • SHA1

      3be9949773b27cc0fdd47f8c69650804085cfab2

    • SHA256

      beec62cffed38f64b1b55847acbd3845e812010ebde9f507f9e29fd8ffba3a21

    • SHA512

      e09bbe2743228d248310ec582dafa1121205e45c0413cdca723f69fe05b741dd73cd2867ef9d4977c966d6d7383f8be46f4df16221e41f09818c18209aaa1ef5

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIovr:egKcR4mjD9r82e

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks