Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    60c57886290ae5215e42c688065a330d_JaffaCakes118

  • Size

    13KB

  • Sample

    240721-v44ffawhje

  • MD5

    60c57886290ae5215e42c688065a330d

  • SHA1

    73c7e863efbbc77755f05f3cd4664edfe77539ce

  • SHA256

    231ea61d93a3ee47c63f04115cf5853fe1761fa476fca73b05b6568f55ebc292

  • SHA512

    0625354c06dc069edf931d88b274f556c9bd520d58b6cf5a75c139bc3fe616a79abbab0d755c44bf58598475c6085f5576b9be5cc8b73149f18f92ecceec6b4b

  • SSDEEP

    384:8/0ZwkBGa/OnPgjEjuTKDB0cUTGthmMUNl:RBGa/OO46m0cfCMw

Malware Config

Targets

    • Target

      60c57886290ae5215e42c688065a330d_JaffaCakes118

    • Size

      13KB

    • MD5

      60c57886290ae5215e42c688065a330d

    • SHA1

      73c7e863efbbc77755f05f3cd4664edfe77539ce

    • SHA256

      231ea61d93a3ee47c63f04115cf5853fe1761fa476fca73b05b6568f55ebc292

    • SHA512

      0625354c06dc069edf931d88b274f556c9bd520d58b6cf5a75c139bc3fe616a79abbab0d755c44bf58598475c6085f5576b9be5cc8b73149f18f92ecceec6b4b

    • SSDEEP

      384:8/0ZwkBGa/OnPgjEjuTKDB0cUTGthmMUNl:RBGa/OO46m0cfCMw

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks