Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    619b6486f1a4e6451206847951bf9efc_JaffaCakes118

  • Size

    468KB

  • Sample

    240721-15lvnsxdke

  • MD5

    619b6486f1a4e6451206847951bf9efc

  • SHA1

    d37c7529d3565482d5d9e67c1fed6455f2de0669

  • SHA256

    5c4d0962a9e5ffc28a0bf8d3951e9017d3a639f80d2c2a2912fb0d8190fe81b2

  • SHA512

    ed003ef65b45174c1b2729ef6c6123a842d5a62ff057614a0280e7bc39ed4e8bd952fd2032b0a2e04bfa879a2307df52f15f0841b07b298eecf39abfb38f949b

  • SSDEEP

    6144:xKU6TGEOMB9Q7z76B1151BDloXLGkf3aLiqQ2qJzoUa+7+q0EmU/tcmeyo2x3Sf5:xKJgzetovGi5ZkUR77mS2eniMKkBLm

Malware Config

Targets

    • Target

      619b6486f1a4e6451206847951bf9efc_JaffaCakes118

    • Size

      468KB

    • MD5

      619b6486f1a4e6451206847951bf9efc

    • SHA1

      d37c7529d3565482d5d9e67c1fed6455f2de0669

    • SHA256

      5c4d0962a9e5ffc28a0bf8d3951e9017d3a639f80d2c2a2912fb0d8190fe81b2

    • SHA512

      ed003ef65b45174c1b2729ef6c6123a842d5a62ff057614a0280e7bc39ed4e8bd952fd2032b0a2e04bfa879a2307df52f15f0841b07b298eecf39abfb38f949b

    • SSDEEP

      6144:xKU6TGEOMB9Q7z76B1151BDloXLGkf3aLiqQ2qJzoUa+7+q0EmU/tcmeyo2x3Sf5:xKJgzetovGi5ZkUR77mS2eniMKkBLm

    • Drops file in Drivers directory

    • Sets service image path in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks