Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ab3b3e976a24af93f0de6de3a2c55ce0_JaffaCakes118

  • Size

    100KB

  • Sample

    240819-qwvfcaxakd

  • MD5

    ab3b3e976a24af93f0de6de3a2c55ce0

  • SHA1

    17db173c1c71d81670fcdaae1818bb4c37c58509

  • SHA256

    ba926c17ff7589df6b4b34fe2d58f091f96a5b7b904529bcc7d403e152ec0121

  • SHA512

    90f6dd29ad02c67629a0405737f4bef579016ca7e81c7c500e2c40dc90cfba121c3fc19234bbb51f9718d08c93675eb3922cc79dfed924d191241a1092dfba49

  • SSDEEP

    3072:ipsNNK9n6iXcZuWtof6xURykTsRgo7kY:hKh68mo28FY

Malware Config

Targets

    • Target

      ab3b3e976a24af93f0de6de3a2c55ce0_JaffaCakes118

    • Size

      100KB

    • MD5

      ab3b3e976a24af93f0de6de3a2c55ce0

    • SHA1

      17db173c1c71d81670fcdaae1818bb4c37c58509

    • SHA256

      ba926c17ff7589df6b4b34fe2d58f091f96a5b7b904529bcc7d403e152ec0121

    • SHA512

      90f6dd29ad02c67629a0405737f4bef579016ca7e81c7c500e2c40dc90cfba121c3fc19234bbb51f9718d08c93675eb3922cc79dfed924d191241a1092dfba49

    • SSDEEP

      3072:ipsNNK9n6iXcZuWtof6xURykTsRgo7kY:hKh68mo28FY

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks