Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    27a333e9aeb8c68751461090d080791d_JaffaCakes118

  • Size

    689KB

  • Sample

    240706-hqq7qszbrj

  • MD5

    27a333e9aeb8c68751461090d080791d

  • SHA1

    f27c77ae544f03f83fc0d09b18cc42e852dc061b

  • SHA256

    e0f44f5eb70f44bf48197b0729458de958d0ee9f7f6cc3ecc9fa460354fdda82

  • SHA512

    6f0451a23682e4da8565bc93c74fabab92d87f63c200eed79b0d827be280f796237855e76a781de0345330ee9873dbc5af9fe65187faacf70f481057108c2caf

  • SSDEEP

    12288:/upxBi7xX74QXxtYunc6VnCGOjtk4nEs+uFMEeoX0wK+kt1T2MYb:/qxBqxX74QBtYnCROjtkqEs+bWLfb

Malware Config

Targets

    • Target

      27a333e9aeb8c68751461090d080791d_JaffaCakes118

    • Size

      689KB

    • MD5

      27a333e9aeb8c68751461090d080791d

    • SHA1

      f27c77ae544f03f83fc0d09b18cc42e852dc061b

    • SHA256

      e0f44f5eb70f44bf48197b0729458de958d0ee9f7f6cc3ecc9fa460354fdda82

    • SHA512

      6f0451a23682e4da8565bc93c74fabab92d87f63c200eed79b0d827be280f796237855e76a781de0345330ee9873dbc5af9fe65187faacf70f481057108c2caf

    • SSDEEP

      12288:/upxBi7xX74QXxtYunc6VnCGOjtk4nEs+uFMEeoX0wK+kt1T2MYb:/qxBqxX74QBtYnCROjtkqEs+bWLfb

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks