Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    746cb17b56ad14494a15531afc167ccb_JaffaCakes118

  • Size

    784KB

  • Sample

    240726-rpe8hswhjd

  • MD5

    746cb17b56ad14494a15531afc167ccb

  • SHA1

    138d6d8d429d19ab9e83736b585384875d651a02

  • SHA256

    daec6ee887786ae17cd669625b2a26ec0632d4787dbce36d336ba55e31a3c95c

  • SHA512

    0fa3e6e684d2d38c70f4b117547c782ddbd4c950b5258be4793efb35ece2b8d04cca7b2696d045fc1caa2a41db4a5850588c32f7bfd629a1137502f67af29efb

  • SSDEEP

    24576:KrxL0/Dmf6BTJttFClkcGJD12RiSHyaqH14wS25HU5Q:4LkDTJg5GJ5KjFa0

Malware Config

Targets

    • Target

      746cb17b56ad14494a15531afc167ccb_JaffaCakes118

    • Size

      784KB

    • MD5

      746cb17b56ad14494a15531afc167ccb

    • SHA1

      138d6d8d429d19ab9e83736b585384875d651a02

    • SHA256

      daec6ee887786ae17cd669625b2a26ec0632d4787dbce36d336ba55e31a3c95c

    • SHA512

      0fa3e6e684d2d38c70f4b117547c782ddbd4c950b5258be4793efb35ece2b8d04cca7b2696d045fc1caa2a41db4a5850588c32f7bfd629a1137502f67af29efb

    • SSDEEP

      24576:KrxL0/Dmf6BTJttFClkcGJD12RiSHyaqH14wS25HU5Q:4LkDTJg5GJ5KjFa0

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks