Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1ce1ed02371bae8c1200d2c59a83260f_JaffaCakes118

  • Size

    983KB

  • Sample

    240728-w9ymtasald

  • MD5

    1ce1ed02371bae8c1200d2c59a83260f

  • SHA1

    aa70613ab0fb3415196499a80f658c9482171b44

  • SHA256

    1966471ded07c464c10fd76b8945445a3602edaa744193a7396517620d2037d8

  • SHA512

    b381346f3d94263b4954ac1b332bce104c8eb45cc71434eb7a7bee2d6a6b6dc2bccb69754f5fb01a9d7c68b2ed69f07b162602b3d9e5d1c2546caf79f0e2a888

  • SSDEEP

    24576:hMgiW1oT+7MvxhhRIj8HKvcUx/ab8OKzeS6tPTanHwSeIV7Hzn:hMuUNFo8HKvD91KBTwQSeIV7Hzn

Malware Config

Targets

    • Target

      1ce1ed02371bae8c1200d2c59a83260f_JaffaCakes118

    • Size

      983KB

    • MD5

      1ce1ed02371bae8c1200d2c59a83260f

    • SHA1

      aa70613ab0fb3415196499a80f658c9482171b44

    • SHA256

      1966471ded07c464c10fd76b8945445a3602edaa744193a7396517620d2037d8

    • SHA512

      b381346f3d94263b4954ac1b332bce104c8eb45cc71434eb7a7bee2d6a6b6dc2bccb69754f5fb01a9d7c68b2ed69f07b162602b3d9e5d1c2546caf79f0e2a888

    • SSDEEP

      24576:hMgiW1oT+7MvxhhRIj8HKvcUx/ab8OKzeS6tPTanHwSeIV7Hzn:hMuUNFo8HKvD91KBTwQSeIV7Hzn

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Enterprise v15

Tasks