Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    32630019e867d0b4dde3acfc63b6be4f_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240709-29dkjatdlb

  • MD5

    32630019e867d0b4dde3acfc63b6be4f

  • SHA1

    f0616875f463ed291746cd8d8aab764620b5f490

  • SHA256

    61b9898838e4963292006d0a1e1719dbf164c83071f0af412140eb8273f5e0d4

  • SHA512

    53f502f2df987f0e0ace5260bfa2e554b88bb304c598ffa925b4c5ba1521912697965e5e0b425e09f37bf1aa919e86637d141114f1a54bfbb80efd9cf1886594

  • SSDEEP

    49152:s3974/ASayWOGB41+t3CN0rp5nPYThpCfV:841+t3Cqrp5PE8fV

Malware Config

Targets

    • Target

      32630019e867d0b4dde3acfc63b6be4f_JaffaCakes118

    • Size

      3.4MB

    • MD5

      32630019e867d0b4dde3acfc63b6be4f

    • SHA1

      f0616875f463ed291746cd8d8aab764620b5f490

    • SHA256

      61b9898838e4963292006d0a1e1719dbf164c83071f0af412140eb8273f5e0d4

    • SHA512

      53f502f2df987f0e0ace5260bfa2e554b88bb304c598ffa925b4c5ba1521912697965e5e0b425e09f37bf1aa919e86637d141114f1a54bfbb80efd9cf1886594

    • SSDEEP

      49152:s3974/ASayWOGB41+t3CN0rp5nPYThpCfV:841+t3Cqrp5PE8fV

    • UnicornStealer

      UnicornStealer is a modular infostealer written in C++.

    • Unicorn Stealer payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Enterprise v15

Tasks