Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42cf356e8b757fed71f7747118655d2c_JaffaCakes118

  • Size

    194KB

  • Sample

    240713-wybnxatgma

  • MD5

    42cf356e8b757fed71f7747118655d2c

  • SHA1

    d85cab75a7e12f7e1cf59503b954a7608531011c

  • SHA256

    e064ca1075f4b2861fcc65313b8fb37bf62435097ebd2cc2d654dae23245224c

  • SHA512

    eaac5602069d88d297c6a217dbe10629037daa27445be55e790274fd19dcc0ef7fd1cbf0b260ef65386cc311bbb596cc6a33bd73bc7e0628c5d61f417902a6fc

  • SSDEEP

    6144:BjcsqnZvGULew8v6m9HKOos+h4+nTSjbxIAZ/M:SfAk8x9Fos6nmn7NM

Malware Config

Targets

    • Target

      42cf356e8b757fed71f7747118655d2c_JaffaCakes118

    • Size

      194KB

    • MD5

      42cf356e8b757fed71f7747118655d2c

    • SHA1

      d85cab75a7e12f7e1cf59503b954a7608531011c

    • SHA256

      e064ca1075f4b2861fcc65313b8fb37bf62435097ebd2cc2d654dae23245224c

    • SHA512

      eaac5602069d88d297c6a217dbe10629037daa27445be55e790274fd19dcc0ef7fd1cbf0b260ef65386cc311bbb596cc6a33bd73bc7e0628c5d61f417902a6fc

    • SSDEEP

      6144:BjcsqnZvGULew8v6m9HKOos+h4+nTSjbxIAZ/M:SfAk8x9Fos6nmn7NM

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks