Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    38ba91855e3d7d70862b24d81357858f_JaffaCakes118

  • Size

    88KB

  • Sample

    240711-mej2hasdlp

  • MD5

    38ba91855e3d7d70862b24d81357858f

  • SHA1

    b9c84a9c247805a37647c560252ed83567255a17

  • SHA256

    d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3

  • SHA512

    6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684

  • SSDEEP

    1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX

Malware Config

Targets

    • Target

      38ba91855e3d7d70862b24d81357858f_JaffaCakes118

    • Size

      88KB

    • MD5

      38ba91855e3d7d70862b24d81357858f

    • SHA1

      b9c84a9c247805a37647c560252ed83567255a17

    • SHA256

      d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3

    • SHA512

      6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684

    • SSDEEP

      1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks