Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9409e6bfaaf19c6f843798b7527ababc_JaffaCakes118

  • Size

    297KB

  • Sample

    240813-vz5gya1fpk

  • MD5

    9409e6bfaaf19c6f843798b7527ababc

  • SHA1

    16c817a55c44be4770296468a15fad4268a118c3

  • SHA256

    465db1882d529caea843c95842f5572ed28596ad165178989a48455cad295724

  • SHA512

    e475f93ca24f7166923d183789178baf1f79e43aa34e2d17ac815e2b9ca6ecb848b1fbda6120cdab7149910d4d17ee7abde73eecbcf81b88eb2e6f423df459c3

  • SSDEEP

    6144:kF0bfde3syUk+rYruA30orIFRFSoOXhoMfm23T:dbU3WYCA30or4PSl2Ml

Malware Config

Targets

    • Target

      9409e6bfaaf19c6f843798b7527ababc_JaffaCakes118

    • Size

      297KB

    • MD5

      9409e6bfaaf19c6f843798b7527ababc

    • SHA1

      16c817a55c44be4770296468a15fad4268a118c3

    • SHA256

      465db1882d529caea843c95842f5572ed28596ad165178989a48455cad295724

    • SHA512

      e475f93ca24f7166923d183789178baf1f79e43aa34e2d17ac815e2b9ca6ecb848b1fbda6120cdab7149910d4d17ee7abde73eecbcf81b88eb2e6f423df459c3

    • SSDEEP

      6144:kF0bfde3syUk+rYruA30orIFRFSoOXhoMfm23T:dbU3WYCA30or4PSl2Ml

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks