Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    32e0fcb59c1d52ee2325e63539dd3e3c_JaffaCakes118

  • Size

    104KB

  • Sample

    240710-cd7q3azdpk

  • MD5

    32e0fcb59c1d52ee2325e63539dd3e3c

  • SHA1

    c57390c1aafeb7443f100351b6e33b0a045f4d46

  • SHA256

    554ca08da8485788ea22f846706e69c3d60d8c3830ffd8357554741d8ab48cf5

  • SHA512

    362650f63e740f8ee56a71732a15c6ddf6978055eff95fdaa99d3addf27f5ac333a431b4974c0002213f763ebfd8483147c14c73b408565283b89248de287d10

  • SSDEEP

    3072:KZ5gEuNmRiDp6RaXD8LYhUgJebBgyoD0:mNuNlX8L5qG

Malware Config

Targets

    • Target

      32e0fcb59c1d52ee2325e63539dd3e3c_JaffaCakes118

    • Size

      104KB

    • MD5

      32e0fcb59c1d52ee2325e63539dd3e3c

    • SHA1

      c57390c1aafeb7443f100351b6e33b0a045f4d46

    • SHA256

      554ca08da8485788ea22f846706e69c3d60d8c3830ffd8357554741d8ab48cf5

    • SHA512

      362650f63e740f8ee56a71732a15c6ddf6978055eff95fdaa99d3addf27f5ac333a431b4974c0002213f763ebfd8483147c14c73b408565283b89248de287d10

    • SSDEEP

      3072:KZ5gEuNmRiDp6RaXD8LYhUgJebBgyoD0:mNuNlX8L5qG

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks