Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    835fdef0d790de30bd378772b3df274f_JaffaCakes118

  • Size

    294KB

  • Sample

    240802-hbk26swbjb

  • MD5

    835fdef0d790de30bd378772b3df274f

  • SHA1

    26c6739a4383fd3c63e9ec824983abce5ee69240

  • SHA256

    9b88b7a099f6baf08736671da110c0f8818f49b76084d047dde6842719205d1f

  • SHA512

    e7a53b2c4072bc9c4ee5bb861d9895f0df0245f1a13fb886359b37f70a18c909ec59e1b4cbfc92cd95cce870b74c0ec17be15eab1e095d223cad45bf5f67a676

  • SSDEEP

    6144:ogOMMB7FAFJh6ydWE5h9wGajkc9Yw++MXZBB8alTRTLsdJ:o8q7FAsyD5kGa7DMJBBj3XsdJ

Malware Config

Targets

    • Target

      835fdef0d790de30bd378772b3df274f_JaffaCakes118

    • Size

      294KB

    • MD5

      835fdef0d790de30bd378772b3df274f

    • SHA1

      26c6739a4383fd3c63e9ec824983abce5ee69240

    • SHA256

      9b88b7a099f6baf08736671da110c0f8818f49b76084d047dde6842719205d1f

    • SHA512

      e7a53b2c4072bc9c4ee5bb861d9895f0df0245f1a13fb886359b37f70a18c909ec59e1b4cbfc92cd95cce870b74c0ec17be15eab1e095d223cad45bf5f67a676

    • SSDEEP

      6144:ogOMMB7FAFJh6ydWE5h9wGajkc9Yw++MXZBB8alTRTLsdJ:o8q7FAsyD5kGa7DMJBBj3XsdJ

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks