Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a6af010f317b08c4cb93cfbe2134b71a_JaffaCakes118

  • Size

    40KB

  • Sample

    240818-n362lssfrg

  • MD5

    a6af010f317b08c4cb93cfbe2134b71a

  • SHA1

    3de2a3ff86e7dea0a0d021271ef76944da9807c8

  • SHA256

    18ca21b6b773883fbf6d3c990e72c602d781331abc36f1d3df18a48a5b1e12b9

  • SHA512

    47e705ab046284ad5a4c7c0d81f3e2914e8097d188cfac66f41445c7159440aa4808712eac913e8e33ca2c87e63dc6a945fdd765ed77d562e09993d97e71d15a

  • SSDEEP

    768:n/Vvh+yyY56bM42rNeWpfdI1En+zrXUCeQkGTFCEuQuB74nb9fnmaBTksbIkwoEK:/VZ+J06bM42rN9Ru1En+zrECtlTFZueJ

Malware Config

Targets

    • Target

      ha_PasswordFox-v1.10/PasswordFox110.exe

    • Size

      44KB

    • MD5

      120a80f32c2eca0091c0d670adbc615f

    • SHA1

      6890fd8de271d8f49ace15728733f4e599c45699

    • SHA256

      3b5ae435b0a465d90dfb2b01ce9720d4d038217d8596e644a2e13a032e981934

    • SHA512

      9129c6bca5ffbe673464bf24262a5ab932baf588426e4d687c99bfe3e2906dc6b0af133855c95dc2e25f310e9df9abdd41e8267ff14fc98f4491e65ec43a803a

    • SSDEEP

      768:QGAPin+req8BRYGXhnpdjuGQcUTUQVGiAp7KynbUEa2x2ha5WVQVyeTZ:Qxn8B9hpdPQbTUoGiA9KnDHVQVyeT

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target

      ha_PasswordFox-v1.10/南方的雨 博客 - 原创技术交流博客,集合各大论坛精华..url

    • Size

      176B

    • MD5

      b1dfc300594c3fe4dd5ff532089feef7

    • SHA1

      5f8e2582e84d7ab2e82405945ec67df4ce80e31e

    • SHA256

      ac77b1cd98b74a3a1ae1fa4531e8b70aef3cf20dd81077380c46f2a34c006ddc

    • SHA512

      9e5c87286c20e1d6d752a687199576e50727beaf2cb7f58f075bc20ce065f6b241dc3cb676e234f639552bae2c49c8bb1479a5b65d4bb0666b648340ed2bd67a

    Score
    1/10
    • Target

      ha_PasswordFox-v1.10/听画书苑 开源_影视_资源_互动_社区.url

    • Size

      177B

    • MD5

      e02a8635a255fbd3f740f3c4e7c0f77b

    • SHA1

      88838cebb0d71dd6b6b55ef6c4737eb4055a4001

    • SHA256

      5fe1256ad3880a3bec946af005a113dca28c736796fb2e11fbb2eaa9f4d2e24c

    • SHA512

      475264cf3fb3cf18fe6defa929fc5367428756d428105d2781a60acedd4f111b1d3401bee7a105fc64825316fcfb0ed368b26c572eb48a7c86c39635ce6e85bc

    Score
    1/10
    • Target

      ha_PasswordFox-v1.10/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks