Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4553748f300676873e21f4f5b1de46e0_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240714-lzg7zawblp

  • MD5

    4553748f300676873e21f4f5b1de46e0

  • SHA1

    d073da1d10a9625ec3c5f2f8b546add37cf15af1

  • SHA256

    9db4e53122eed4bba862ad50550232aff82e8d5de4706da219c4f7404191907a

  • SHA512

    d98354f02e806ada99016aa0bc8ad8b8dc8ed39346e5c3b4ffd9dc2dfc97407db93fd4da2b4d9a525ac02a52c8b2df2a142a83d3fa5b59742c8b5271bd2b2101

  • SSDEEP

    24576:pcs3MKLBDY7Ryy0fNRqTb+UO8lZN899ysIOmQuKa/57HaLtVDpEYfMoR:P1LBUPoj6tv49yL2Pa9SV7p

Malware Config

Targets

    • Target

      4553748f300676873e21f4f5b1de46e0_JaffaCakes118

    • Size

      1.4MB

    • MD5

      4553748f300676873e21f4f5b1de46e0

    • SHA1

      d073da1d10a9625ec3c5f2f8b546add37cf15af1

    • SHA256

      9db4e53122eed4bba862ad50550232aff82e8d5de4706da219c4f7404191907a

    • SHA512

      d98354f02e806ada99016aa0bc8ad8b8dc8ed39346e5c3b4ffd9dc2dfc97407db93fd4da2b4d9a525ac02a52c8b2df2a142a83d3fa5b59742c8b5271bd2b2101

    • SSDEEP

      24576:pcs3MKLBDY7Ryy0fNRqTb+UO8lZN899ysIOmQuKa/57HaLtVDpEYfMoR:P1LBUPoj6tv49yL2Pa9SV7p

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks