Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    77cd862342db4417463afe922630347d_JaffaCakes118

  • Size

    554KB

  • Sample

    240727-l81exawera

  • MD5

    77cd862342db4417463afe922630347d

  • SHA1

    f2ea2ac9da998ed66d063d3d6973046cc1734c69

  • SHA256

    2dd13b8db52ef55d1463332b4752831fd96ec571240f7401659ce76fe9c4811f

  • SHA512

    d57931e8262a765e9928f69a1ee0402021c8553c03573d6023641d39fa99af40514ead4a3e7b2e18c08ef043641020b5f9709d19539ed0e7d536edb6c8bc737c

  • SSDEEP

    12288:/f9NGa0exJhaFoY2RXQld/UZTkmL+YL1tjqMjHKfPcQjRaR:9IKxJha2hXg/U1kmi41JqAuN

Malware Config

Targets

    • Target

      77cd862342db4417463afe922630347d_JaffaCakes118

    • Size

      554KB

    • MD5

      77cd862342db4417463afe922630347d

    • SHA1

      f2ea2ac9da998ed66d063d3d6973046cc1734c69

    • SHA256

      2dd13b8db52ef55d1463332b4752831fd96ec571240f7401659ce76fe9c4811f

    • SHA512

      d57931e8262a765e9928f69a1ee0402021c8553c03573d6023641d39fa99af40514ead4a3e7b2e18c08ef043641020b5f9709d19539ed0e7d536edb6c8bc737c

    • SSDEEP

      12288:/f9NGa0exJhaFoY2RXQld/UZTkmL+YL1tjqMjHKfPcQjRaR:9IKxJha2hXg/U1kmi41JqAuN

    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks