Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    868f6e8b827d34ca5e371a47eedad73c_JaffaCakes118

  • Size

    297KB

  • Sample

    240810-slznesyfrg

  • MD5

    868f6e8b827d34ca5e371a47eedad73c

  • SHA1

    6b371490cbce9f9a7ae9fffd05187ca37e36c7bd

  • SHA256

    414770f95067da2c32501ac6eb77035ba738916e6ef4b52932bca711c6c50ce9

  • SHA512

    a4236605d2c669131e1b8bb965c43944679760828e3062bd92415ce6f791c991664ae98a6133c9010eb33c2a802f082012812ff0be4b472cc63c73954a414346

  • SSDEEP

    3072:Hpe7QPXKomWqLEnCYvcvIXRTy1hmUI0xlOcwSIvS3oGcFuG9hFoHk148GzMwypuR:JjXfvDx8hzNxl8SIvSiFxTO8GzM+

Malware Config

Targets

    • Target

      868f6e8b827d34ca5e371a47eedad73c_JaffaCakes118

    • Size

      297KB

    • MD5

      868f6e8b827d34ca5e371a47eedad73c

    • SHA1

      6b371490cbce9f9a7ae9fffd05187ca37e36c7bd

    • SHA256

      414770f95067da2c32501ac6eb77035ba738916e6ef4b52932bca711c6c50ce9

    • SHA512

      a4236605d2c669131e1b8bb965c43944679760828e3062bd92415ce6f791c991664ae98a6133c9010eb33c2a802f082012812ff0be4b472cc63c73954a414346

    • SSDEEP

      3072:Hpe7QPXKomWqLEnCYvcvIXRTy1hmUI0xlOcwSIvS3oGcFuG9hFoHk148GzMwypuR:JjXfvDx8hzNxl8SIvSiFxTO8GzM+

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks