Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    78ec40d752bd5c80b6a2cb5c22e8ba2c_JaffaCakes118

  • Size

    283KB

  • Sample

    240727-vs55wstana

  • MD5

    78ec40d752bd5c80b6a2cb5c22e8ba2c

  • SHA1

    bab6222ba672e1c1d27691b69731b265ff8f48b9

  • SHA256

    5db409f6d26e91ff0b3f8cc570f31f6d19b4fc302ab5902166839bfd842d5492

  • SHA512

    551e2e72bba8caa8079be7e1abff8bb1c71f0b7c126c83abf307f8173caac72d647a27f0e47b36565d34f34f59c60b65edf85c14727d8ba026a16eb49c72fc97

  • SSDEEP

    6144:e9l9vjx3MtZ4KrllCHN2pBhWE6kdisuL2r55W1rda2:e1vjxUoApBhn+2vaP

Score
10/10

Malware Config

Targets

    • Target

      78ec40d752bd5c80b6a2cb5c22e8ba2c_JaffaCakes118

    • Size

      283KB

    • MD5

      78ec40d752bd5c80b6a2cb5c22e8ba2c

    • SHA1

      bab6222ba672e1c1d27691b69731b265ff8f48b9

    • SHA256

      5db409f6d26e91ff0b3f8cc570f31f6d19b4fc302ab5902166839bfd842d5492

    • SHA512

      551e2e72bba8caa8079be7e1abff8bb1c71f0b7c126c83abf307f8173caac72d647a27f0e47b36565d34f34f59c60b65edf85c14727d8ba026a16eb49c72fc97

    • SSDEEP

      6144:e9l9vjx3MtZ4KrllCHN2pBhWE6kdisuL2r55W1rda2:e1vjxUoApBhn+2vaP

    Score
    10/10
    • Modifies WinLogon for persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks