Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    04316d68b8e1e229bb2c62d213f4d6d7_JaffaCakes118

  • Size

    196KB

  • Sample

    240728-a9lglaybql

  • MD5

    04316d68b8e1e229bb2c62d213f4d6d7

  • SHA1

    2dbfc87428c59e500673a5216c501baba230add4

  • SHA256

    d4be547bce4c819e5334759dad1e4e07878c5ca7c96b797ad1de3fb111322fc2

  • SHA512

    f35dc74f82a3caa48222335d34f9084d648d0f9dbe6a7e07f7265f6f2a86c30f9b0003264536a1dfe13f7b4f3bcb769bd295d9947843f633034220cf7b9fae1b

  • SSDEEP

    3072:83qUZ0Cj9ZMFG3HEfKe1SOPAGq7leTWpF3KVC8cZsvo7AD/eNbMiKkOXjlHlLxOz:hSwyMTWHKVEtA5HkKjlFcqAPe

Malware Config

Targets

    • Target

      04316d68b8e1e229bb2c62d213f4d6d7_JaffaCakes118

    • Size

      196KB

    • MD5

      04316d68b8e1e229bb2c62d213f4d6d7

    • SHA1

      2dbfc87428c59e500673a5216c501baba230add4

    • SHA256

      d4be547bce4c819e5334759dad1e4e07878c5ca7c96b797ad1de3fb111322fc2

    • SHA512

      f35dc74f82a3caa48222335d34f9084d648d0f9dbe6a7e07f7265f6f2a86c30f9b0003264536a1dfe13f7b4f3bcb769bd295d9947843f633034220cf7b9fae1b

    • SSDEEP

      3072:83qUZ0Cj9ZMFG3HEfKe1SOPAGq7leTWpF3KVC8cZsvo7AD/eNbMiKkOXjlHlLxOz:hSwyMTWHKVEtA5HkKjlFcqAPe

    • Deletes itself

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks