Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    adfce8d0f5416107a8acd10dde03c1fe_JaffaCakes118

  • Size

    739KB

  • Sample

    240820-fy9b6syemp

  • MD5

    adfce8d0f5416107a8acd10dde03c1fe

  • SHA1

    3e1b9649c0e55f503ab5a30bb7b6240f62c848d5

  • SHA256

    25862ad301f8b84c809256c04c3fa08eae435b77639a2d1e7a92cea143749a2e

  • SHA512

    b3730b36cb46984f64740d29f464f6bb7fc15226df628bb702bc3eefb3a20d629bb247eb50151925851e867e64e85b8f39f951f0018615dd52da97c7d0f32ceb

  • SSDEEP

    12288:RLfYODg2j5RQrFEsRLlF3/qynqj9aMeyZgK2IWATHgcK:xQNO5RQrC0vPxqjo/sMATHgv

Malware Config

Targets

    • Target

      adfce8d0f5416107a8acd10dde03c1fe_JaffaCakes118

    • Size

      739KB

    • MD5

      adfce8d0f5416107a8acd10dde03c1fe

    • SHA1

      3e1b9649c0e55f503ab5a30bb7b6240f62c848d5

    • SHA256

      25862ad301f8b84c809256c04c3fa08eae435b77639a2d1e7a92cea143749a2e

    • SHA512

      b3730b36cb46984f64740d29f464f6bb7fc15226df628bb702bc3eefb3a20d629bb247eb50151925851e867e64e85b8f39f951f0018615dd52da97c7d0f32ceb

    • SSDEEP

      12288:RLfYODg2j5RQrFEsRLlF3/qynqj9aMeyZgK2IWATHgcK:xQNO5RQrC0vPxqjo/sMATHgv

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks