Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a06a6b80bac583222a264682c2dbbdf5_JaffaCakes118

  • Size

    436KB

  • Sample

    240816-3tde9svcqc

  • MD5

    a06a6b80bac583222a264682c2dbbdf5

  • SHA1

    91ddf78ba59af9782341332869c6fc3593388086

  • SHA256

    75f09e6ba39b55b535e154013ad99f6aa2273a25c683472da6f905746ee19946

  • SHA512

    ad371634658e2f57e917c663239f1ac273688cf56c6d8662b3531dd8503d25731bde9de013e89724ea6f9f7f26281125d8f660bea1f79c5348986b2ad30709df

  • SSDEEP

    12288:Ens+F4z37Izai0czeCEUWueejYtSoed3h:r+F477Q1Tz1E9uvGSJ

Malware Config

Targets

    • Target

      a06a6b80bac583222a264682c2dbbdf5_JaffaCakes118

    • Size

      436KB

    • MD5

      a06a6b80bac583222a264682c2dbbdf5

    • SHA1

      91ddf78ba59af9782341332869c6fc3593388086

    • SHA256

      75f09e6ba39b55b535e154013ad99f6aa2273a25c683472da6f905746ee19946

    • SHA512

      ad371634658e2f57e917c663239f1ac273688cf56c6d8662b3531dd8503d25731bde9de013e89724ea6f9f7f26281125d8f660bea1f79c5348986b2ad30709df

    • SSDEEP

      12288:Ens+F4z37Izai0czeCEUWueejYtSoed3h:r+F477Q1Tz1E9uvGSJ

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks