Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac0481970b8179b32a19ab74a8103213_JaffaCakes118

  • Size

    166KB

  • Sample

    240819-wl8swasblm

  • MD5

    ac0481970b8179b32a19ab74a8103213

  • SHA1

    568fb287eb2287a09f4643d9d298081766b85195

  • SHA256

    529ad0216f546c999d7ca20bb6771ab7d95e28064976253d82ad40d8fe18ca46

  • SHA512

    ec2466b4b94df8849b37ef4888d4ee0ac9ce64c42be600696017582d90e772e37d4353b72fabb7d915a515ef52e9b27a8b315116c0c79f59f414506956513442

  • SSDEEP

    3072:4VK8Nx+ZH/032dR/boobSBiU4TwYcu+1CeizFmVqvWEIq8E+jod0kMAgB:h8NxI032PboUSBopS1CFBO28E8od0k/W

Malware Config

Targets

    • Target

      ac0481970b8179b32a19ab74a8103213_JaffaCakes118

    • Size

      166KB

    • MD5

      ac0481970b8179b32a19ab74a8103213

    • SHA1

      568fb287eb2287a09f4643d9d298081766b85195

    • SHA256

      529ad0216f546c999d7ca20bb6771ab7d95e28064976253d82ad40d8fe18ca46

    • SHA512

      ec2466b4b94df8849b37ef4888d4ee0ac9ce64c42be600696017582d90e772e37d4353b72fabb7d915a515ef52e9b27a8b315116c0c79f59f414506956513442

    • SSDEEP

      3072:4VK8Nx+ZH/032dR/boobSBiU4TwYcu+1CeizFmVqvWEIq8E+jod0kMAgB:h8NxI032PboUSBopS1CFBO28E8od0k/W

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks