Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    72ccacb9a9aed976aaf06a22ad0eca88_JaffaCakes118

  • Size

    67KB

  • Sample

    240726-gfx2vsshmc

  • MD5

    72ccacb9a9aed976aaf06a22ad0eca88

  • SHA1

    d094db77e9045db06c0957aae91bd8bd101fc936

  • SHA256

    d7354de4431732d005200a6f3f82faf063d98871f56dbbe55f0937ac3731d1a1

  • SHA512

    d2271a10797ac19a397fac2e2ec0b8dc4b9a9f216dd7674d42aca90c5994e5567d18eda62ac20855cbc9e1f2f84eceec50ba26699e1cb51b0c7ed8519f546b7d

  • SSDEEP

    1536:MCwoLj+x8iHrsBJf9eUmqdQ8rNiCffLxGinouy8F:5woLj+OiHrptqdQqNiIXoutF

Malware Config

Targets

    • Target

      72ccacb9a9aed976aaf06a22ad0eca88_JaffaCakes118

    • Size

      67KB

    • MD5

      72ccacb9a9aed976aaf06a22ad0eca88

    • SHA1

      d094db77e9045db06c0957aae91bd8bd101fc936

    • SHA256

      d7354de4431732d005200a6f3f82faf063d98871f56dbbe55f0937ac3731d1a1

    • SHA512

      d2271a10797ac19a397fac2e2ec0b8dc4b9a9f216dd7674d42aca90c5994e5567d18eda62ac20855cbc9e1f2f84eceec50ba26699e1cb51b0c7ed8519f546b7d

    • SSDEEP

      1536:MCwoLj+x8iHrsBJf9eUmqdQ8rNiCffLxGinouy8F:5woLj+OiHrptqdQqNiIXoutF

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks