Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    34cdbfd3e2775f97daad1645ef6e26ae_JaffaCakes118

  • Size

    119KB

  • Sample

    240710-p4sq2s1dpc

  • MD5

    34cdbfd3e2775f97daad1645ef6e26ae

  • SHA1

    e17f0da7a2aa2ce121734f627164285dfdc41013

  • SHA256

    dde6c95bd8ed3e0cb87234611a3fa23b06e48faed84f5c331cfafa1bff007c4d

  • SHA512

    ea1bbc5a40bb30b59a10d946b3ffdc63b3d29b1be4053122ceb8860e5e57a974169aa90f917e959fc70285522d494831e5bcfca521d7eb61e4254c658c5913b8

  • SSDEEP

    1536:ZQSRt9VsK79BZ3basVhbFUl9+AqJaCPe+uXVdur4dTD9QN15kvH:Gi/VsKLZrpVhh8FQZuaMdX01o

Malware Config

Targets

    • Target

      34cdbfd3e2775f97daad1645ef6e26ae_JaffaCakes118

    • Size

      119KB

    • MD5

      34cdbfd3e2775f97daad1645ef6e26ae

    • SHA1

      e17f0da7a2aa2ce121734f627164285dfdc41013

    • SHA256

      dde6c95bd8ed3e0cb87234611a3fa23b06e48faed84f5c331cfafa1bff007c4d

    • SHA512

      ea1bbc5a40bb30b59a10d946b3ffdc63b3d29b1be4053122ceb8860e5e57a974169aa90f917e959fc70285522d494831e5bcfca521d7eb61e4254c658c5913b8

    • SSDEEP

      1536:ZQSRt9VsK79BZ3basVhbFUl9+AqJaCPe+uXVdur4dTD9QN15kvH:Gi/VsKLZrpVhh8FQZuaMdX01o

    • Modifies firewall policy service

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks