Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    884fa6f68ebc37e897c4a7d7bb32a75f_JaffaCakes118

  • Size

    51KB

  • Sample

    240811-axztfswerl

  • MD5

    884fa6f68ebc37e897c4a7d7bb32a75f

  • SHA1

    011601fcb414846d72e7bcf3973ce0248e7ed35e

  • SHA256

    738cbb5e4c08c9e0384206c297ebb207dd8a64cce51ffaba62cce84053a92b75

  • SHA512

    61b33063b2673f5bd700b9c32aa0c3204002670ebb24b202fec5226650b23741db27e24a073894accb572417eb655d8cf43ca6bbce3b375119b5c7ac0b5a8c18

  • SSDEEP

    1536:E5urmX2eZwS2N6XG9IgTwHZ6ioZWZ3um4:B5yw6XG9fwXoZWt54

Malware Config

Targets

    • Target

      884fa6f68ebc37e897c4a7d7bb32a75f_JaffaCakes118

    • Size

      51KB

    • MD5

      884fa6f68ebc37e897c4a7d7bb32a75f

    • SHA1

      011601fcb414846d72e7bcf3973ce0248e7ed35e

    • SHA256

      738cbb5e4c08c9e0384206c297ebb207dd8a64cce51ffaba62cce84053a92b75

    • SHA512

      61b33063b2673f5bd700b9c32aa0c3204002670ebb24b202fec5226650b23741db27e24a073894accb572417eb655d8cf43ca6bbce3b375119b5c7ac0b5a8c18

    • SSDEEP

      1536:E5urmX2eZwS2N6XG9IgTwHZ6ioZWZ3um4:B5yw6XG9fwXoZWt54

    • Drops file in Drivers directory

    • Sets service image path in registry

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks