Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7834900a4b9dcf37857437f6ddb86ea8_JaffaCakes118

  • Size

    457KB

  • Sample

    240727-plgwtszanr

  • MD5

    7834900a4b9dcf37857437f6ddb86ea8

  • SHA1

    4e1452cc0fac529c83eb39b96130182e46d8ffac

  • SHA256

    c2eee9a335a4b7f5652304053e4e47bfc33db85d2fe0d1a8ba46f5fa618365cb

  • SHA512

    35eff398647d7fb0f3c9acb4372730fb19614c18ab2086a0d3948b4c4a91a02551b0ceeca835b97dc6f7ac337b333cc7786ae40d313aadf08ee5602d2f356951

  • SSDEEP

    12288:xFAj6D7u0zsW54rbbOoyDN631JroKRnT3LQptxXV:XF7u0b54r9CN6lJL1a

Malware Config

Targets

    • Target

      7834900a4b9dcf37857437f6ddb86ea8_JaffaCakes118

    • Size

      457KB

    • MD5

      7834900a4b9dcf37857437f6ddb86ea8

    • SHA1

      4e1452cc0fac529c83eb39b96130182e46d8ffac

    • SHA256

      c2eee9a335a4b7f5652304053e4e47bfc33db85d2fe0d1a8ba46f5fa618365cb

    • SHA512

      35eff398647d7fb0f3c9acb4372730fb19614c18ab2086a0d3948b4c4a91a02551b0ceeca835b97dc6f7ac337b333cc7786ae40d313aadf08ee5602d2f356951

    • SSDEEP

      12288:xFAj6D7u0zsW54rbbOoyDN631JroKRnT3LQptxXV:XF7u0b54r9CN6lJL1a

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks