Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6c520ed93654e6369dcf1ef50efee865_JaffaCakes118

  • Size

    836KB

  • Sample

    240724-w2w41s1ajn

  • MD5

    6c520ed93654e6369dcf1ef50efee865

  • SHA1

    1e8ae55c1e4fd4c0cdcdc7f07dcb3bdc58e2d1c0

  • SHA256

    ded7d0db8eaae0010cffb8fd3713ecbc1af523fe04414a324f367abda4e3d02a

  • SHA512

    84e1fb30bf653a8d3b7258b1b632fd7283f462107fae614690b499f5e609c812e770615441870970bd3d15ccaffe12be52c417895204cddad835ab8049997a0b

  • SSDEEP

    12288:1dMIwS97wJs6tSKDXEabXaC+jhc1S8XXk7CZzHsZH9dq0T:bMIJxSDX3bqjhcfHk7MzH6z

Malware Config

Targets

    • Target

      6c520ed93654e6369dcf1ef50efee865_JaffaCakes118

    • Size

      836KB

    • MD5

      6c520ed93654e6369dcf1ef50efee865

    • SHA1

      1e8ae55c1e4fd4c0cdcdc7f07dcb3bdc58e2d1c0

    • SHA256

      ded7d0db8eaae0010cffb8fd3713ecbc1af523fe04414a324f367abda4e3d02a

    • SHA512

      84e1fb30bf653a8d3b7258b1b632fd7283f462107fae614690b499f5e609c812e770615441870970bd3d15ccaffe12be52c417895204cddad835ab8049997a0b

    • SSDEEP

      12288:1dMIwS97wJs6tSKDXEabXaC+jhc1S8XXk7CZzHsZH9dq0T:bMIJxSDX3bqjhcfHk7MzH6z

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Dridex payload

      Detects Dridex x64 core DLL in memory.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks