Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1897ab0b024d6e76cc9c2a1ad891f955_JaffaCakes118

  • Size

    100KB

  • Sample

    240628-dtw5ya1dpj

  • MD5

    1897ab0b024d6e76cc9c2a1ad891f955

  • SHA1

    858be84cd13c22ccdc33a1ca8977a6af8543d3b1

  • SHA256

    800b5cc4e45afd34b633b6a5af2f2106d5365569f722bb8252ad9992f2f6fc36

  • SHA512

    fa23bbd3407ea97dba8417c2cb754e7c82cc0baaeb6ea93c7eda461010d504b89182b29bd5af83d7192a58210d0a11bca40197e751fe44b8fd1b0aebb225c9ba

  • SSDEEP

    3072:vJtBbzpm8Spmf3JALWcN4OykTsRgo7kY:1pqmvJLcN4l8FY

Malware Config

Targets

    • Target

      1897ab0b024d6e76cc9c2a1ad891f955_JaffaCakes118

    • Size

      100KB

    • MD5

      1897ab0b024d6e76cc9c2a1ad891f955

    • SHA1

      858be84cd13c22ccdc33a1ca8977a6af8543d3b1

    • SHA256

      800b5cc4e45afd34b633b6a5af2f2106d5365569f722bb8252ad9992f2f6fc36

    • SHA512

      fa23bbd3407ea97dba8417c2cb754e7c82cc0baaeb6ea93c7eda461010d504b89182b29bd5af83d7192a58210d0a11bca40197e751fe44b8fd1b0aebb225c9ba

    • SSDEEP

      3072:vJtBbzpm8Spmf3JALWcN4OykTsRgo7kY:1pqmvJLcN4l8FY

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks