Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    82c4e4b7e4a86e223e99a7ea5ba2f4b6_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240802-db8e9awgjg

  • MD5

    82c4e4b7e4a86e223e99a7ea5ba2f4b6

  • SHA1

    8143bd54afa1c934859bfa8757777cf4a6f59aad

  • SHA256

    5d15cb1a1b821e09fdf35f81b3369ec9920624b2adba8f33a4d6d0aa0e9fc453

  • SHA512

    9188e2b81f20e096540a7bcb5880aaaac92c4a85979169923656c6a7de9397e76b7cbc16d22543add8019701adb84aa16d08b40a4a50f200a24f1976658b3d85

  • SSDEEP

    24576:XtM5Bm8zcC9g2ea8xaZou1IwyPDZU863HDZad5SB62E4a7rnMZ9b+I9mIXsyYRzG:XtMbRn62ea7y9wyPDf63DZarSB3Qsjb

Malware Config

Targets

    • Target

      82c4e4b7e4a86e223e99a7ea5ba2f4b6_JaffaCakes118

    • Size

      1.5MB

    • MD5

      82c4e4b7e4a86e223e99a7ea5ba2f4b6

    • SHA1

      8143bd54afa1c934859bfa8757777cf4a6f59aad

    • SHA256

      5d15cb1a1b821e09fdf35f81b3369ec9920624b2adba8f33a4d6d0aa0e9fc453

    • SHA512

      9188e2b81f20e096540a7bcb5880aaaac92c4a85979169923656c6a7de9397e76b7cbc16d22543add8019701adb84aa16d08b40a4a50f200a24f1976658b3d85

    • SSDEEP

      24576:XtM5Bm8zcC9g2ea8xaZou1IwyPDZU863HDZad5SB62E4a7rnMZ9b+I9mIXsyYRzG:XtMbRn62ea7y9wyPDf63DZarSB3Qsjb

    • Adds Run key to start application

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks