Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a980d1a55ca6cc39e9567961cba1226b_JaffaCakes118

  • Size

    487KB

  • Sample

    240819-eks8cswhkl

  • MD5

    a980d1a55ca6cc39e9567961cba1226b

  • SHA1

    f93a1b7c5f302887f522a2573dbbd3a762faa82a

  • SHA256

    2dbb2c24d691355e175d06e9b6f0a4d6cb19007dcfa1e166a9053cb99b1fd5a4

  • SHA512

    f829579e0da3f962e0fcd6998c769cf7f2006fe3a2c0b202902b95f165e8addd85497eff0adfbce4503f6d33c94937463084448a8a83014d76f7dfda9fe757a7

  • SSDEEP

    3072:VEMocGyYa14wvaGlJtZPPlIKXH41Wc4rXVHc5nUse5VS:VhzGyYaiw/ZHlIiJbTVHqU7

Malware Config

Targets

    • Target

      a980d1a55ca6cc39e9567961cba1226b_JaffaCakes118

    • Size

      487KB

    • MD5

      a980d1a55ca6cc39e9567961cba1226b

    • SHA1

      f93a1b7c5f302887f522a2573dbbd3a762faa82a

    • SHA256

      2dbb2c24d691355e175d06e9b6f0a4d6cb19007dcfa1e166a9053cb99b1fd5a4

    • SHA512

      f829579e0da3f962e0fcd6998c769cf7f2006fe3a2c0b202902b95f165e8addd85497eff0adfbce4503f6d33c94937463084448a8a83014d76f7dfda9fe757a7

    • SSDEEP

      3072:VEMocGyYa14wvaGlJtZPPlIKXH41Wc4rXVHc5nUse5VS:VhzGyYaiw/ZHlIiJbTVHqU7

    • Drops file in Drivers directory

    • Modifies Windows Firewall

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks