Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    66136f2897f0d01bf7c075f4ab01e443_JaffaCakes118

  • Size

    186KB

  • Sample

    240723-eptppawgra

  • MD5

    66136f2897f0d01bf7c075f4ab01e443

  • SHA1

    0e959629e825dd8822763db08c367b5a8f96edac

  • SHA256

    6238b4f0cf40f56484a9764c4fe0de9a0f987dbc10b4ae196e77812580ce6951

  • SHA512

    bdc47fcdcc419c15fe634614807064feab4f0b51732bc94726e8bb8585144360b672cac2dba8b3fb1174ad99041b9bbc7dfa04a39d1ac451ef2c18a54f49b9a0

  • SSDEEP

    3072:NRyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:NUsMYod+X3oI+YS1tA8

Malware Config

Targets

    • Target

      66136f2897f0d01bf7c075f4ab01e443_JaffaCakes118

    • Size

      186KB

    • MD5

      66136f2897f0d01bf7c075f4ab01e443

    • SHA1

      0e959629e825dd8822763db08c367b5a8f96edac

    • SHA256

      6238b4f0cf40f56484a9764c4fe0de9a0f987dbc10b4ae196e77812580ce6951

    • SHA512

      bdc47fcdcc419c15fe634614807064feab4f0b51732bc94726e8bb8585144360b672cac2dba8b3fb1174ad99041b9bbc7dfa04a39d1ac451ef2c18a54f49b9a0

    • SSDEEP

      3072:NRyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:NUsMYod+X3oI+YS1tA8

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks