Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2d9e9be24371572f16ffb9ed1d3bb777_JaffaCakes118

  • Size

    100KB

  • Sample

    240708-ym3dlaybre

  • MD5

    2d9e9be24371572f16ffb9ed1d3bb777

  • SHA1

    6f440788a0fd1927812c7d59a3cb4344d64d6777

  • SHA256

    4c9f343c4a2278d2ae59e374ee75c58109e1c4b8f6c3ebf481b496811ca1a7f8

  • SHA512

    9b11baf53d8420a41e03ec1c90e16970ac6affeb558a919ee30e7a68d809346c972862c813ed8fb67c89e9e1082558eaa099fc230ba0ab74816401e72ccf3cb6

  • SSDEEP

    1536:Z331xdLa+ku3U+f+tzTdK0h+0l6enPRkvGQVgIE:ZnZL3ksjfKcNOLIE

Score
10/10

Malware Config

Targets

    • Target

      2d9e9be24371572f16ffb9ed1d3bb777_JaffaCakes118

    • Size

      100KB

    • MD5

      2d9e9be24371572f16ffb9ed1d3bb777

    • SHA1

      6f440788a0fd1927812c7d59a3cb4344d64d6777

    • SHA256

      4c9f343c4a2278d2ae59e374ee75c58109e1c4b8f6c3ebf481b496811ca1a7f8

    • SHA512

      9b11baf53d8420a41e03ec1c90e16970ac6affeb558a919ee30e7a68d809346c972862c813ed8fb67c89e9e1082558eaa099fc230ba0ab74816401e72ccf3cb6

    • SSDEEP

      1536:Z331xdLa+ku3U+f+tzTdK0h+0l6enPRkvGQVgIE:ZnZL3ksjfKcNOLIE

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks