Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    61c0ef5bed97ef0cf5d6125abf30ec9b_JaffaCakes118

  • Size

    674KB

  • Sample

    240721-2yfkra1gmk

  • MD5

    61c0ef5bed97ef0cf5d6125abf30ec9b

  • SHA1

    2ce17d3a0f422702008c6578ff1026e9205da04f

  • SHA256

    8a2d6d76a4d005177164e1805627ae521500afcaeb052ba2889f3a2c0c8690b9

  • SHA512

    a0958d1f0c54d407ec710de5a6747aad6d5466449d971a89cd7d0ed83a3987643d27d9df2476174d2f3dd2171eacf9cea757492f724ab492a5d08fc5ed035e5a

  • SSDEEP

    12288:dkgVPXIx/ZpLD6EW5nfFko08b2S6D22z+H7fUA67uOSZsNW06:ugKFZpLDrgfF301DD2778AvOSZs96

Score
10/10

Malware Config

Targets

    • Target

      61c0ef5bed97ef0cf5d6125abf30ec9b_JaffaCakes118

    • Size

      674KB

    • MD5

      61c0ef5bed97ef0cf5d6125abf30ec9b

    • SHA1

      2ce17d3a0f422702008c6578ff1026e9205da04f

    • SHA256

      8a2d6d76a4d005177164e1805627ae521500afcaeb052ba2889f3a2c0c8690b9

    • SHA512

      a0958d1f0c54d407ec710de5a6747aad6d5466449d971a89cd7d0ed83a3987643d27d9df2476174d2f3dd2171eacf9cea757492f724ab492a5d08fc5ed035e5a

    • SSDEEP

      12288:dkgVPXIx/ZpLD6EW5nfFko08b2S6D22z+H7fUA67uOSZsNW06:ugKFZpLDrgfF301DD2778AvOSZs96

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks