Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    744a8caa18b194e9ca9f984053d247cd_JaffaCakes118

  • Size

    423KB

  • Sample

    240726-qygbha1djq

  • MD5

    744a8caa18b194e9ca9f984053d247cd

  • SHA1

    33ea8507e7ac5c5969e575bacfa33b59bfad1859

  • SHA256

    9115f7f88e755dfaa7bc70287c49e2bc84ab7bd17084be74da1154d965784bbc

  • SHA512

    ebb0d445c309f21afd86e3678a5ec3c6e547cd05cce812965bedb809466007c42637666cdab95aec548bfbc252b7409b993ad7a1caf55fd38143c4b5f0bffe21

  • SSDEEP

    6144:qaSxZp4zkIwS3f9KcxmNQteOYOgk+nhv/hRB/c0tA1oZfVUMTPuPwUwyIBmKoviz:IrpvY8yefOgk+nhHDRA1o1lT0Emiz

Malware Config

Targets

    • Target

      744a8caa18b194e9ca9f984053d247cd_JaffaCakes118

    • Size

      423KB

    • MD5

      744a8caa18b194e9ca9f984053d247cd

    • SHA1

      33ea8507e7ac5c5969e575bacfa33b59bfad1859

    • SHA256

      9115f7f88e755dfaa7bc70287c49e2bc84ab7bd17084be74da1154d965784bbc

    • SHA512

      ebb0d445c309f21afd86e3678a5ec3c6e547cd05cce812965bedb809466007c42637666cdab95aec548bfbc252b7409b993ad7a1caf55fd38143c4b5f0bffe21

    • SSDEEP

      6144:qaSxZp4zkIwS3f9KcxmNQteOYOgk+nhv/hRB/c0tA1oZfVUMTPuPwUwyIBmKoviz:IrpvY8yefOgk+nhHDRA1o1lT0Emiz

    • Modifies security service

    • Windows security bypass

    • Looks for VMWare Tools registry key

    • Deletes itself

    • Executes dropped EXE

    • Windows security modification

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks