Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    760baf3dde06e9de362a7d36054749dc_JaffaCakes118

  • Size

    16KB

  • Sample

    240726-2plqeazbml

  • MD5

    760baf3dde06e9de362a7d36054749dc

  • SHA1

    019899d20dbcf43644f316485bf87701d1bb16f3

  • SHA256

    2be666e810f852aa54333425a40753bec5bf412903a3659ea8976fcea06e9585

  • SHA512

    0b6ff7d6b80d994d164aee2877188849405b213df9653f357c1b5db20f85519bbf82e698996005bb6037e1dd634f753b829729285565c82353e3ff2c550b175b

  • SSDEEP

    384:meW/Wu1BGOusV5iQalskxd6RHoPa8dnZfVQFxo7:+/VUQaGe6Bwa8PfVQFg

Malware Config

Targets

    • Target

      760baf3dde06e9de362a7d36054749dc_JaffaCakes118

    • Size

      16KB

    • MD5

      760baf3dde06e9de362a7d36054749dc

    • SHA1

      019899d20dbcf43644f316485bf87701d1bb16f3

    • SHA256

      2be666e810f852aa54333425a40753bec5bf412903a3659ea8976fcea06e9585

    • SHA512

      0b6ff7d6b80d994d164aee2877188849405b213df9653f357c1b5db20f85519bbf82e698996005bb6037e1dd634f753b829729285565c82353e3ff2c550b175b

    • SSDEEP

      384:meW/Wu1BGOusV5iQalskxd6RHoPa8dnZfVQFxo7:+/VUQaGe6Bwa8PfVQFg

    • Sets service image path in registry

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks