Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9591574952ed0ae6a91196abd222a18d_JaffaCakes118

  • Size

    404KB

  • Sample

    240814-lra4pazfqj

  • MD5

    9591574952ed0ae6a91196abd222a18d

  • SHA1

    48384b0ecebe74316904b4552fa00aaf0e3254eb

  • SHA256

    e6b5ff56857c326b1cdd514bc755affcf35476113b7dda57bd765c45bcad6596

  • SHA512

    c341e82731515db746a9b3d09d7a7a7d66e6001894d99afac7f998309422c8e74b28ab933965b7c8cd2e5201de28657a8d9c6d1412bc1a8d89fac75118f11ccd

  • SSDEEP

    12288:peFBNu9K/FzVfr8DHdWglWW71vtPD5KM+:pUk9OV4T8SWW7XL5KM

Malware Config

Targets

    • Target

      9591574952ed0ae6a91196abd222a18d_JaffaCakes118

    • Size

      404KB

    • MD5

      9591574952ed0ae6a91196abd222a18d

    • SHA1

      48384b0ecebe74316904b4552fa00aaf0e3254eb

    • SHA256

      e6b5ff56857c326b1cdd514bc755affcf35476113b7dda57bd765c45bcad6596

    • SHA512

      c341e82731515db746a9b3d09d7a7a7d66e6001894d99afac7f998309422c8e74b28ab933965b7c8cd2e5201de28657a8d9c6d1412bc1a8d89fac75118f11ccd

    • SSDEEP

      12288:peFBNu9K/FzVfr8DHdWglWW71vtPD5KM+:pUk9OV4T8SWW7XL5KM

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks