Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    60e14dc09dac15a0366b1b1cf4bb121d_JaffaCakes118

  • Size

    79KB

  • Sample

    240721-wqtjraybqd

  • MD5

    60e14dc09dac15a0366b1b1cf4bb121d

  • SHA1

    b6a1a186be31c5e0a7c37420af8820f45781f5f2

  • SHA256

    2f2fae450a80ab3c92c598bdc5db62c859dd7d8c532867123191bb197fcec9af

  • SHA512

    0d5571089de6957db934c18622190014140c77d8f6ddf8c2bee730bd216bf47fe0d8a3e5e464fc8b505fb6de39c81bb3516f0a4d1fd6381fd6e98a1bbb129c61

  • SSDEEP

    768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IibWoA03QSlx+sSgoE:s9Z3KcR4mjD9r8226+tWoV3QSlRFoWZ

Malware Config

Targets

    • Target

      60e14dc09dac15a0366b1b1cf4bb121d_JaffaCakes118

    • Size

      79KB

    • MD5

      60e14dc09dac15a0366b1b1cf4bb121d

    • SHA1

      b6a1a186be31c5e0a7c37420af8820f45781f5f2

    • SHA256

      2f2fae450a80ab3c92c598bdc5db62c859dd7d8c532867123191bb197fcec9af

    • SHA512

      0d5571089de6957db934c18622190014140c77d8f6ddf8c2bee730bd216bf47fe0d8a3e5e464fc8b505fb6de39c81bb3516f0a4d1fd6381fd6e98a1bbb129c61

    • SSDEEP

      768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IibWoA03QSlx+sSgoE:s9Z3KcR4mjD9r8226+tWoV3QSlRFoWZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks