Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    70398240239d3511ad9c8b83c756e05e_JaffaCakes118

  • Size

    448KB

  • Sample

    240725-s7q86sybmm

  • MD5

    70398240239d3511ad9c8b83c756e05e

  • SHA1

    ca2eea24684a5133e13ab4994247ab5aa3a1cd94

  • SHA256

    e5962fc99d664a68cf02aafde57d14bb54d14568bac434f15872e7b16a4c0818

  • SHA512

    30c6fa8268f44b4ab94645ac66e2f5984aafcc0d8a54dcdbfa7c7bf30bce9e3d0d2887dcf9309adade88d61f2181dec9e53de546bd5ff1e9b8d8c86348a64890

  • SSDEEP

    6144:Q/uLIIh13PUFGxdb/6Z87EnMlcrDd1TLiJI0IzL+SKv+lFVsGXHHzXV3J3p+:Q/sffUIdD6Z8A5MI/rxSKzFdE

Malware Config

Targets

    • Target

      70398240239d3511ad9c8b83c756e05e_JaffaCakes118

    • Size

      448KB

    • MD5

      70398240239d3511ad9c8b83c756e05e

    • SHA1

      ca2eea24684a5133e13ab4994247ab5aa3a1cd94

    • SHA256

      e5962fc99d664a68cf02aafde57d14bb54d14568bac434f15872e7b16a4c0818

    • SHA512

      30c6fa8268f44b4ab94645ac66e2f5984aafcc0d8a54dcdbfa7c7bf30bce9e3d0d2887dcf9309adade88d61f2181dec9e53de546bd5ff1e9b8d8c86348a64890

    • SSDEEP

      6144:Q/uLIIh13PUFGxdb/6Z87EnMlcrDd1TLiJI0IzL+SKv+lFVsGXHHzXV3J3p+:Q/sffUIdD6Z8A5MI/rxSKzFdE

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks