Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    78a784e71393f04aee50820c43605690_JaffaCakes118

  • Size

    415KB

  • Sample

    240727-s3326syhrh

  • MD5

    78a784e71393f04aee50820c43605690

  • SHA1

    1d8d238852e030c58af2d81db925e0c9a2e38684

  • SHA256

    0f76edd479ed9476b5ceec68aa1ae4c12386b7b8b25a69034fca875520f79b8a

  • SHA512

    ea226d339a4aadf94f1cecf706f944b67d9d4ebb7db56577aebf16c2838be7239d336b4fded7ba14a39537a8d5fa74779da8a0d32f6e9104fde7bb36fa059ac1

  • SSDEEP

    12288:PZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:PZ6glQlCn0X6X3WoNf

Malware Config

Targets

    • Target

      78a784e71393f04aee50820c43605690_JaffaCakes118

    • Size

      415KB

    • MD5

      78a784e71393f04aee50820c43605690

    • SHA1

      1d8d238852e030c58af2d81db925e0c9a2e38684

    • SHA256

      0f76edd479ed9476b5ceec68aa1ae4c12386b7b8b25a69034fca875520f79b8a

    • SHA512

      ea226d339a4aadf94f1cecf706f944b67d9d4ebb7db56577aebf16c2838be7239d336b4fded7ba14a39537a8d5fa74779da8a0d32f6e9104fde7bb36fa059ac1

    • SSDEEP

      12288:PZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:PZ6glQlCn0X6X3WoNf

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks