Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    25dcf9a3b5b712335b9d82697e919897_JaffaCakes118

  • Size

    26KB

  • Sample

    240704-xgvacsvhng

  • MD5

    25dcf9a3b5b712335b9d82697e919897

  • SHA1

    3879f816235531728f8abb1e8ed6e5db1095af1e

  • SHA256

    ec90c7a2c4dad98c5cb00b55e6abca1ceb20b57e2dc8b50030750dd84af663c3

  • SHA512

    781b4fc239fca17de45fddef31ee79512b928f6e2cd3a18a7809cd2bac9908a05072cf8c9e484d186545ab42044e0f4f82c6f8703819cd4fe93447653aa4688a

  • SSDEEP

    384:UnQUwFccUGmOLKA+Vdz1TM+J+KrXSQUoRH0kYTvYwN31Mcy6uq:1ScUGmOMt17ciSPkYTvYwRzF

Score
10/10

Malware Config

Targets

    • Target

      25dcf9a3b5b712335b9d82697e919897_JaffaCakes118

    • Size

      26KB

    • MD5

      25dcf9a3b5b712335b9d82697e919897

    • SHA1

      3879f816235531728f8abb1e8ed6e5db1095af1e

    • SHA256

      ec90c7a2c4dad98c5cb00b55e6abca1ceb20b57e2dc8b50030750dd84af663c3

    • SHA512

      781b4fc239fca17de45fddef31ee79512b928f6e2cd3a18a7809cd2bac9908a05072cf8c9e484d186545ab42044e0f4f82c6f8703819cd4fe93447653aa4688a

    • SSDEEP

      384:UnQUwFccUGmOLKA+Vdz1TM+J+KrXSQUoRH0kYTvYwN31Mcy6uq:1ScUGmOMt17ciSPkYTvYwRzF

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks