Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    422d7393841ecaf4c6df2123ab9d8e21_JaffaCakes118

  • Size

    100KB

  • Sample

    240713-sd947axerc

  • MD5

    422d7393841ecaf4c6df2123ab9d8e21

  • SHA1

    148fc3d1f959b6dacdb9cac390ee226dadf6cc15

  • SHA256

    82a8fa1e247b1c5a05d17fcc31cceb9d230800563da871f8fb8446c9592a55fa

  • SHA512

    4423c677fe78e59a58943e45f1aef645e20a4ef7cb768fc4b0f0388b3220c9560a82cc0c9c9f52e9cd205d747c56f7e51c9da119389f7fc21691b48e43acc991

  • SSDEEP

    3072:cFJxnbSte+T1YPzp4KDgoc3paYY9Wqfgo2Y:cFJxnbutSCK0ock79W7Y

Malware Config

Targets

    • Target

      422d7393841ecaf4c6df2123ab9d8e21_JaffaCakes118

    • Size

      100KB

    • MD5

      422d7393841ecaf4c6df2123ab9d8e21

    • SHA1

      148fc3d1f959b6dacdb9cac390ee226dadf6cc15

    • SHA256

      82a8fa1e247b1c5a05d17fcc31cceb9d230800563da871f8fb8446c9592a55fa

    • SHA512

      4423c677fe78e59a58943e45f1aef645e20a4ef7cb768fc4b0f0388b3220c9560a82cc0c9c9f52e9cd205d747c56f7e51c9da119389f7fc21691b48e43acc991

    • SSDEEP

      3072:cFJxnbSte+T1YPzp4KDgoc3paYY9Wqfgo2Y:cFJxnbutSCK0ock79W7Y

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks