Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3777f9d74351353daeab8d257e5a3615_JaffaCakes118

  • Size

    251KB

  • Sample

    240711-dlln8sxhpe

  • MD5

    3777f9d74351353daeab8d257e5a3615

  • SHA1

    8847da8147b31e68fb0cb147b8387a1cf2f17187

  • SHA256

    9f56c71bc5d4a778b4d0f5efe4744ad61e62bb9fced14cba7ff4809d45add281

  • SHA512

    7fcfe916ea1ba78b987594a9590ecfe895b01c43dedb94eb00a2ef60a83b9b4d0561431dbc18490750c43bbbce68c486764f6f8fe4986c006fba5d85f416398f

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4seE5e58/FjEvrKpHBrr6:91OgLdar8NGKZBrr6

Malware Config

Targets

    • Target

      3777f9d74351353daeab8d257e5a3615_JaffaCakes118

    • Size

      251KB

    • MD5

      3777f9d74351353daeab8d257e5a3615

    • SHA1

      8847da8147b31e68fb0cb147b8387a1cf2f17187

    • SHA256

      9f56c71bc5d4a778b4d0f5efe4744ad61e62bb9fced14cba7ff4809d45add281

    • SHA512

      7fcfe916ea1ba78b987594a9590ecfe895b01c43dedb94eb00a2ef60a83b9b4d0561431dbc18490750c43bbbce68c486764f6f8fe4986c006fba5d85f416398f

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4seE5e58/FjEvrKpHBrr6:91OgLdar8NGKZBrr6

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks