Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0339097b9e227d23f532c319f24c58e_JaffaCakes118

  • Size

    172KB

  • Sample

    240816-2hfwks1flh

  • MD5

    a0339097b9e227d23f532c319f24c58e

  • SHA1

    b1bdc6f9017cbb7f4b055f867961926f4c097f8d

  • SHA256

    2787e1698813f1eac301106639f183ab383b195ced3a7887d0930fc72b380ff6

  • SHA512

    fd7cb1be4dd1d82286aadeb3ceedbaa8c8fba87b9e043476c83f21ef743c911441b5a335acfd031ee775b01060f158ac42f8b40c55c75070ca8afe94ec66dc08

  • SSDEEP

    3072:AEFWjrDr63/mznS77zVg7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:krDr63/mzne7uNkVsuaRaU6mHG

Malware Config

Targets

    • Target

      a0339097b9e227d23f532c319f24c58e_JaffaCakes118

    • Size

      172KB

    • MD5

      a0339097b9e227d23f532c319f24c58e

    • SHA1

      b1bdc6f9017cbb7f4b055f867961926f4c097f8d

    • SHA256

      2787e1698813f1eac301106639f183ab383b195ced3a7887d0930fc72b380ff6

    • SHA512

      fd7cb1be4dd1d82286aadeb3ceedbaa8c8fba87b9e043476c83f21ef743c911441b5a335acfd031ee775b01060f158ac42f8b40c55c75070ca8afe94ec66dc08

    • SSDEEP

      3072:AEFWjrDr63/mznS77zVg7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:krDr63/mzne7uNkVsuaRaU6mHG

    • Modifies security service

    • Loads dropped DLL

    • Adds Run key to start application

    • Network Share Discovery

      Attempt to gather information on host network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks