Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    68e91dd2367da4dea7d99b1546d292aa_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240723-ztl6maybqk

  • MD5

    68e91dd2367da4dea7d99b1546d292aa

  • SHA1

    6503b0c71d0f54a155bae0b70c56b223075ae38c

  • SHA256

    d090fddf32815c9cb6dddb2e34f7d35b20e0515e5df2626dda4bf9429b58c723

  • SHA512

    e7d2de06219c55efa643bc4d9fb72d33ef3b42856cb9ad71de19a2928840efb42fbff8c606c3dd002d65b52f0c92c5f2ca633c23e6f8cbf7a2d9e18c78a8aef7

  • SSDEEP

    49152:fPTjOn4yru4lgjzK8VRIy5rkH0hhKw2tp5wAQqAsZIg3xWiTE6O6R:fPTA4yrblI3rYAUwApmArAsZIg3xFEY

Malware Config

Targets

    • Target

      68e91dd2367da4dea7d99b1546d292aa_JaffaCakes118

    • Size

      2.4MB

    • MD5

      68e91dd2367da4dea7d99b1546d292aa

    • SHA1

      6503b0c71d0f54a155bae0b70c56b223075ae38c

    • SHA256

      d090fddf32815c9cb6dddb2e34f7d35b20e0515e5df2626dda4bf9429b58c723

    • SHA512

      e7d2de06219c55efa643bc4d9fb72d33ef3b42856cb9ad71de19a2928840efb42fbff8c606c3dd002d65b52f0c92c5f2ca633c23e6f8cbf7a2d9e18c78a8aef7

    • SSDEEP

      49152:fPTjOn4yru4lgjzK8VRIy5rkH0hhKw2tp5wAQqAsZIg3xWiTE6O6R:fPTA4yrblI3rYAUwApmArAsZIg3xFEY

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks