Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    684f35599d9fc1dc0f49c97dbd253027_JaffaCakes118

  • Size

    591KB

  • Sample

    240723-tv1gra1grb

  • MD5

    684f35599d9fc1dc0f49c97dbd253027

  • SHA1

    abf9dbf41a6b0b5770f938b2e0151c2efc755cea

  • SHA256

    1e942e5b91b23fce1f433ef62eab33ae5960e63303839d2e050a4acb2cbebd89

  • SHA512

    2c81491f166d5c5aedde5bd2d835cbbd372edf7227335e257aa7c4f55b4b394a76f3b49e3cdaf21a02e0c1c1a59ab78600d531c6647a2a70c9d0b13f9563624f

  • SSDEEP

    12288:P862Oi5XQhEeZHauP0MbadCGA7yeREK14sCbWFL2oQ2PXVo8+:P862Oi5XQhEeZHNbadWye74sCbjm+

Malware Config

Targets

    • Target

      684f35599d9fc1dc0f49c97dbd253027_JaffaCakes118

    • Size

      591KB

    • MD5

      684f35599d9fc1dc0f49c97dbd253027

    • SHA1

      abf9dbf41a6b0b5770f938b2e0151c2efc755cea

    • SHA256

      1e942e5b91b23fce1f433ef62eab33ae5960e63303839d2e050a4acb2cbebd89

    • SHA512

      2c81491f166d5c5aedde5bd2d835cbbd372edf7227335e257aa7c4f55b4b394a76f3b49e3cdaf21a02e0c1c1a59ab78600d531c6647a2a70c9d0b13f9563624f

    • SSDEEP

      12288:P862Oi5XQhEeZHauP0MbadCGA7yeREK14sCbWFL2oQ2PXVo8+:P862Oi5XQhEeZHNbadWye74sCbjm+

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks