Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a899813a5b70b4ef029e29d64f242952_JaffaCakes118

  • Size

    879KB

  • Sample

    240818-25ft4azerg

  • MD5

    a899813a5b70b4ef029e29d64f242952

  • SHA1

    ef32fd5c3b7b1fb3960ab7c500229199f17965a3

  • SHA256

    b44f3c188ef92605a99fab6f8f57ed846ce1fa1a1fdf50f017befa117f58960e

  • SHA512

    cf6206f447fa1743c3649f936bd7410e37f227f3c2a13b2298ce8e4f0dd6c30638468a4f77473e1a9f953655a7434ec6d60ad7be87268512086017b2f5fd0afa

  • SSDEEP

    24576:nqv9BWmR3IcMK2JCK3eUSfftEAr+0A5BD:nmXd73dO/D

Malware Config

Targets

    • Target

      155绿色软件站.url

    • Size

      219B

    • MD5

      3a1f2a8a3ef08ae269517a69ea918b2c

    • SHA1

      7d2e6719702bc8472e045e010efa6ed3f7df4b5b

    • SHA256

      66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd

    • SHA512

      22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576

    Score
    1/10
    • Target

      DoIt.exe

    • Size

      887KB

    • MD5

      cee34941122951a4414a497f94880b86

    • SHA1

      ead6ff480ca6d0ae4935bafd6954685a46b01b86

    • SHA256

      2c0ff1bb4d365b31dc7718edda04acf3bad1e098119f588ace3887f053e2f0b9

    • SHA512

      ba353d67201bc5857d1c5326ba222493a224000e05574aa9d1033a34a0f129faf020494891a9d3b0017a2b476cb20482a08c85823a7a2e6eb43079ff1c2e5b5b

    • SSDEEP

      12288:f8X4+ysUIJJ96b3pvYeWsw6lVjvFzXhABel2LjQ77xjlx+AYZ8jF4C16yFu/7pMt:f8l8sJ9wxDw66dLjQ7tJPYKF4c6yF8u

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks