Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a3b39741832d3b18dd529a4442e5003e_JaffaCakes118

  • Size

    166KB

  • Sample

    240817-xd7fhs1bjc

  • MD5

    a3b39741832d3b18dd529a4442e5003e

  • SHA1

    03edb644b89ef15a6b72841fb8f94acfbe88cd42

  • SHA256

    401ffb632b61b9a621afeb73482cfa51ef6a2ca71c086d581bfcc46e376b66ec

  • SHA512

    063acfaf48855c9ece6f57a8067ad2630d153659560acd834a3ab5bd486856089696bb8489b51c9b419fc808049578b7b94509aef2b811a644933c86b65166d2

  • SSDEEP

    3072:qGZQR6BuOD/QqG1OWhqk72IwX0g4qq+dD342CnB2As2:XZ1ox1PskahFo2kB2p2

Malware Config

Targets

    • Target

      a3b39741832d3b18dd529a4442e5003e_JaffaCakes118

    • Size

      166KB

    • MD5

      a3b39741832d3b18dd529a4442e5003e

    • SHA1

      03edb644b89ef15a6b72841fb8f94acfbe88cd42

    • SHA256

      401ffb632b61b9a621afeb73482cfa51ef6a2ca71c086d581bfcc46e376b66ec

    • SHA512

      063acfaf48855c9ece6f57a8067ad2630d153659560acd834a3ab5bd486856089696bb8489b51c9b419fc808049578b7b94509aef2b811a644933c86b65166d2

    • SSDEEP

      3072:qGZQR6BuOD/QqG1OWhqk72IwX0g4qq+dD342CnB2As2:XZ1ox1PskahFo2kB2p2

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks