Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8d6ee5d168c4ebe39ef2816d0c789e84_JaffaCakes118

  • Size

    166KB

  • Sample

    240812-fr688s1dlb

  • MD5

    8d6ee5d168c4ebe39ef2816d0c789e84

  • SHA1

    d13143b8cc7d1e569202d7dfe01dc901b6517a28

  • SHA256

    0e354b0a3dae3616280ca94e128efaa0dff8484848336651ae86766a92a3d6c3

  • SHA512

    c812468e071bd86498273ec293d983d749eecb695bc38ba7a3af87f099bffafc71099078628276c57741c05a0c7bb4afa246db4e20f219e6cd68969b719e3a02

  • SSDEEP

    3072:KgEvGJcoMSW6MFG1Yb3bdYTqaiZtjBG6o7+yT74Xff0DGzD74t0PCal:KgE+Js6ZidHTjg7+yAXj3uHO

Malware Config

Targets

    • Target

      8d6ee5d168c4ebe39ef2816d0c789e84_JaffaCakes118

    • Size

      166KB

    • MD5

      8d6ee5d168c4ebe39ef2816d0c789e84

    • SHA1

      d13143b8cc7d1e569202d7dfe01dc901b6517a28

    • SHA256

      0e354b0a3dae3616280ca94e128efaa0dff8484848336651ae86766a92a3d6c3

    • SHA512

      c812468e071bd86498273ec293d983d749eecb695bc38ba7a3af87f099bffafc71099078628276c57741c05a0c7bb4afa246db4e20f219e6cd68969b719e3a02

    • SSDEEP

      3072:KgEvGJcoMSW6MFG1Yb3bdYTqaiZtjBG6o7+yT74Xff0DGzD74t0PCal:KgE+Js6ZidHTjg7+yAXj3uHO

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks