Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    76e2028910c54c8d61867cc5a5aea8ce_JaffaCakes118

  • Size

    397KB

  • Sample

    240727-dzt8jaxcpb

  • MD5

    76e2028910c54c8d61867cc5a5aea8ce

  • SHA1

    07f8b99b59c81e7652a01b21169e934680f0da2a

  • SHA256

    f255ef9f24653182ff5ac58f1e99be794b1f0486dae0b51ae62d14ba420eeb9a

  • SHA512

    41abc93f292ea20390556779c1e142e7f2e66ecd8dc9814b290142ed1c2b9ee23de4bf5f2fb5a76cfd5ef0b4317d030b9a5fb8a2f7db686a200799e4253fd8fb

  • SSDEEP

    6144:cLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXCg9:I+u9nx2GjMY3XKfd/H/9PD9

Malware Config

Targets

    • Target

      76e2028910c54c8d61867cc5a5aea8ce_JaffaCakes118

    • Size

      397KB

    • MD5

      76e2028910c54c8d61867cc5a5aea8ce

    • SHA1

      07f8b99b59c81e7652a01b21169e934680f0da2a

    • SHA256

      f255ef9f24653182ff5ac58f1e99be794b1f0486dae0b51ae62d14ba420eeb9a

    • SHA512

      41abc93f292ea20390556779c1e142e7f2e66ecd8dc9814b290142ed1c2b9ee23de4bf5f2fb5a76cfd5ef0b4317d030b9a5fb8a2f7db686a200799e4253fd8fb

    • SSDEEP

      6144:cLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXCg9:I+u9nx2GjMY3XKfd/H/9PD9

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Impair Defenses: Safe Mode Boot

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks