Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a8f2671d69c35165bfa2f140636828a9_JaffaCakes118

  • Size

    438KB

  • Sample

    240819-bc2yraycln

  • MD5

    a8f2671d69c35165bfa2f140636828a9

  • SHA1

    edcd823be1303e58e7bf4fba216aa336ac392251

  • SHA256

    d2cd5e3e9aee0a980feae40bac23f95be68c6efcc78d00c3e6d2278e5f94bb28

  • SHA512

    0270764a6db4cb68abe631ff8abad0af5dbc0e3c73b6e321617a83e9d76817497694641e62c9ce7821062ea0196645211fa6e0f2c7cee0f7066de79b4364c8e5

  • SSDEEP

    12288:XgBzNl5+IlWavMxTOWxRpkg7O6PTG6WnLZPZWP9s2QD2k:wB553veOWDG6WnDGQD

Malware Config

Targets

    • Target

      a8f2671d69c35165bfa2f140636828a9_JaffaCakes118

    • Size

      438KB

    • MD5

      a8f2671d69c35165bfa2f140636828a9

    • SHA1

      edcd823be1303e58e7bf4fba216aa336ac392251

    • SHA256

      d2cd5e3e9aee0a980feae40bac23f95be68c6efcc78d00c3e6d2278e5f94bb28

    • SHA512

      0270764a6db4cb68abe631ff8abad0af5dbc0e3c73b6e321617a83e9d76817497694641e62c9ce7821062ea0196645211fa6e0f2c7cee0f7066de79b4364c8e5

    • SSDEEP

      12288:XgBzNl5+IlWavMxTOWxRpkg7O6PTG6WnLZPZWP9s2QD2k:wB553veOWDG6WnDGQD

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks