Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    772cac15ce601e0da72e2a46b75f5c30_JaffaCakes118

  • Size

    14KB

  • Sample

    240727-gmk1wazhml

  • MD5

    772cac15ce601e0da72e2a46b75f5c30

  • SHA1

    ec5b3006ef013b618643bb93eab6942d3c140a1e

  • SHA256

    d93696fa7d758f55c7f8b9c283ec2dcaeb5c572e932287e43cd8a12b98ebefef

  • SHA512

    572109b1ca9770bff5777ad0380d1edfbbf53bec032015d270009479f8ed5ac8399cf88525e497f561391b206f8a7def411a2f340cfde2b23dbeacded3ae59ac

  • SSDEEP

    384:3ghZQWvPfJvw3qXs/JsDCmeTWkz/khvb56Cqq:iQePa3p/KCTFz/khv9V

Malware Config

Targets

    • Target

      772cac15ce601e0da72e2a46b75f5c30_JaffaCakes118

    • Size

      14KB

    • MD5

      772cac15ce601e0da72e2a46b75f5c30

    • SHA1

      ec5b3006ef013b618643bb93eab6942d3c140a1e

    • SHA256

      d93696fa7d758f55c7f8b9c283ec2dcaeb5c572e932287e43cd8a12b98ebefef

    • SHA512

      572109b1ca9770bff5777ad0380d1edfbbf53bec032015d270009479f8ed5ac8399cf88525e497f561391b206f8a7def411a2f340cfde2b23dbeacded3ae59ac

    • SSDEEP

      384:3ghZQWvPfJvw3qXs/JsDCmeTWkz/khvb56Cqq:iQePa3p/KCTFz/khv9V

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks