Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4c6d81195872c57a980380f78796489b_JaffaCakes118

  • Size

    276KB

  • Sample

    240716-cw36la1bpm

  • MD5

    4c6d81195872c57a980380f78796489b

  • SHA1

    27fc4daaba4457bc5ae8c0ed2aa5c411a5ad0e49

  • SHA256

    78bea7949c47df75d0c0943845872988c936ade6f1589526188c78508097985c

  • SHA512

    2d7399231eb2f699a70c4d7f3aed065b1050a90cd3d2db9dbbd79683e23ffc06a047f0defc367a61becda06feefe1f012b52e9c4833c72ee70e20771a2e743b1

  • SSDEEP

    6144:B4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ba8VxDbbvhpHuGfZBAR51wV

Score
10/10

Malware Config

Targets

    • Target

      4c6d81195872c57a980380f78796489b_JaffaCakes118

    • Size

      276KB

    • MD5

      4c6d81195872c57a980380f78796489b

    • SHA1

      27fc4daaba4457bc5ae8c0ed2aa5c411a5ad0e49

    • SHA256

      78bea7949c47df75d0c0943845872988c936ade6f1589526188c78508097985c

    • SHA512

      2d7399231eb2f699a70c4d7f3aed065b1050a90cd3d2db9dbbd79683e23ffc06a047f0defc367a61becda06feefe1f012b52e9c4833c72ee70e20771a2e743b1

    • SSDEEP

      6144:B4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ba8VxDbbvhpHuGfZBAR51wV

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks