Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8585fa94f2d20feab240ca5eeeb3862e_JaffaCakes118

  • Size

    32KB

  • Sample

    240810-k24nbaxfjf

  • MD5

    8585fa94f2d20feab240ca5eeeb3862e

  • SHA1

    5fd22e6c18eeecb323ee2625b1fdb59fcfe40b57

  • SHA256

    007b58265732ecf94d7276446e91e6dfa1aa5b807f989c96a292bd76d73cb642

  • SHA512

    8ac8f06961ad6a97b913a575a3de78022d9b48dae514ea305f43a3faaedbfae65528a3626d612879050eba6909983c247b3ee0af49f92fdf3ce685dddf0e4a02

  • SSDEEP

    768:SMdjk5JT0XUI9+2agznl1qcpYJxJmpWAq3:pS5cvgSq0YJD9

Malware Config

Targets

    • Target

      8585fa94f2d20feab240ca5eeeb3862e_JaffaCakes118

    • Size

      32KB

    • MD5

      8585fa94f2d20feab240ca5eeeb3862e

    • SHA1

      5fd22e6c18eeecb323ee2625b1fdb59fcfe40b57

    • SHA256

      007b58265732ecf94d7276446e91e6dfa1aa5b807f989c96a292bd76d73cb642

    • SHA512

      8ac8f06961ad6a97b913a575a3de78022d9b48dae514ea305f43a3faaedbfae65528a3626d612879050eba6909983c247b3ee0af49f92fdf3ce685dddf0e4a02

    • SSDEEP

      768:SMdjk5JT0XUI9+2agznl1qcpYJxJmpWAq3:pS5cvgSq0YJD9

    • Deletes itself

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks