Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    269b572ea4afd6d9d5484f2a21402177_JaffaCakes118

  • Size

    40KB

  • Sample

    240704-3b7ldsxfjb

  • MD5

    269b572ea4afd6d9d5484f2a21402177

  • SHA1

    c8bdd2fc2ee908ac035f412e4bddb1066be68f04

  • SHA256

    deb2c35f92efb9f819dcff443c73b581eb3af5d682d22a92d3d0c3510de8182a

  • SHA512

    9e1d40d6895358c86ce276c342acd57a0fa3f6ee3be254fcf34dca59fe1c8b4aed7dfcbcac2bc2dcdb95b6c708bd378a592fcb45516af443581de86dad146312

  • SSDEEP

    768:2YKg9l4ZMkeKVsaIMPCZtaCeMTf1r99r6y3WhOCmn/+t2gWL1O3Y:2Yf96FeK7KZhYyUOPDguOI

Score
8/10

Malware Config

Targets

    • Target

      269b572ea4afd6d9d5484f2a21402177_JaffaCakes118

    • Size

      40KB

    • MD5

      269b572ea4afd6d9d5484f2a21402177

    • SHA1

      c8bdd2fc2ee908ac035f412e4bddb1066be68f04

    • SHA256

      deb2c35f92efb9f819dcff443c73b581eb3af5d682d22a92d3d0c3510de8182a

    • SHA512

      9e1d40d6895358c86ce276c342acd57a0fa3f6ee3be254fcf34dca59fe1c8b4aed7dfcbcac2bc2dcdb95b6c708bd378a592fcb45516af443581de86dad146312

    • SSDEEP

      768:2YKg9l4ZMkeKVsaIMPCZtaCeMTf1r99r6y3WhOCmn/+t2gWL1O3Y:2Yf96FeK7KZhYyUOPDguOI

    Score
    8/10
    • Drops file in Drivers directory

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks