Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a9dc23bf4b0cde4a8f32e9e57c8d1bd6_JaffaCakes118

  • Size

    96KB

  • Sample

    240819-gqn7psxgmd

  • MD5

    a9dc23bf4b0cde4a8f32e9e57c8d1bd6

  • SHA1

    7b851bf1c3280ab5d1086c806803dd9b2f5c2e9f

  • SHA256

    9ad8c3439276bdcde1d0447a201a44435faa55e77e90e008d8230ad3ca6aa275

  • SHA512

    658253d62dcda8ccc019a6514161c7f8f07b7a5a2ce3847a3813aa2ef56c348a1298cc8c1eb06c4216f33a509346c8a38553efd8f3060305da4f7ee0a0b1e6cc

  • SSDEEP

    1536:IQk509d5BiYJhyhDFesmaPifUBEtyWV1y86L9xlQ4oMzPmRbbcsEkTvZoY9:Jk509NVehDyaafUBi/R6HloMzOBdEkvF

Malware Config

Targets

    • Target

      a9dc23bf4b0cde4a8f32e9e57c8d1bd6_JaffaCakes118

    • Size

      96KB

    • MD5

      a9dc23bf4b0cde4a8f32e9e57c8d1bd6

    • SHA1

      7b851bf1c3280ab5d1086c806803dd9b2f5c2e9f

    • SHA256

      9ad8c3439276bdcde1d0447a201a44435faa55e77e90e008d8230ad3ca6aa275

    • SHA512

      658253d62dcda8ccc019a6514161c7f8f07b7a5a2ce3847a3813aa2ef56c348a1298cc8c1eb06c4216f33a509346c8a38553efd8f3060305da4f7ee0a0b1e6cc

    • SSDEEP

      1536:IQk509d5BiYJhyhDFesmaPifUBEtyWV1y86L9xlQ4oMzPmRbbcsEkTvZoY9:Jk509NVehDyaafUBi/R6HloMzOBdEkvF

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks