Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6446f82364e4c85e9139b0999e365648_JaffaCakes118

  • Size

    128KB

  • Sample

    240722-wztwwa1dqr

  • MD5

    6446f82364e4c85e9139b0999e365648

  • SHA1

    770283ade7d3703ed37eaed29d87844578b44910

  • SHA256

    d684e74f9ff79a749c66b5f33afc74db4e664374f6ce5567c618c156df16bd13

  • SHA512

    ef7f572723b40d9d25b93762c31f79fd1aa83ab00d5bff454762938eb913eacb1e2cdc0bac5a8b07fde68c57aff8df22f069cd3d782324d17b0016558a749f01

  • SSDEEP

    3072:LGsTooyT9fA8T6G+RZIdBIMoFCSzqrBxH:LGqooyZfAY6LWBYzz+Bx

Score
8/10

Malware Config

Targets

    • Target

      6446f82364e4c85e9139b0999e365648_JaffaCakes118

    • Size

      128KB

    • MD5

      6446f82364e4c85e9139b0999e365648

    • SHA1

      770283ade7d3703ed37eaed29d87844578b44910

    • SHA256

      d684e74f9ff79a749c66b5f33afc74db4e664374f6ce5567c618c156df16bd13

    • SHA512

      ef7f572723b40d9d25b93762c31f79fd1aa83ab00d5bff454762938eb913eacb1e2cdc0bac5a8b07fde68c57aff8df22f069cd3d782324d17b0016558a749f01

    • SSDEEP

      3072:LGsTooyT9fA8T6G+RZIdBIMoFCSzqrBxH:LGqooyZfAY6LWBYzz+Bx

    Score
    8/10
    • Server Software Component: Terminal Services DLL

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks