Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b22626ccc76a3766301343a12e59760a_JaffaCakes118

  • Size

    17KB

  • Sample

    240821-fdf5wszhqb

  • MD5

    b22626ccc76a3766301343a12e59760a

  • SHA1

    1ff93c7865f1e90243faea3f8ed3e27b5eec17e9

  • SHA256

    8fdc45f1fa1dfc53dc1aa6450b7589c621b53415aeab1039faff42c43bd2cefa

  • SHA512

    a6d4a762e08ef33ceea2fb3f720147fb2395cb3116f4a7ca362679cb0a8a789d71a6e81ecd2eee05a533295704e239b61cd77fb8994f131315ae72613bb467e8

  • SSDEEP

    384:SPqKvj6yZ8xsDEHKt1OeI7D8/dc0w40UOt/J9+cLxrvnOAcDLX9:Sh9eyDEPJ7Dsct4MAKrt6j9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

95.234.36.4:31373

Targets

    • Target

      b22626ccc76a3766301343a12e59760a_JaffaCakes118

    • Size

      17KB

    • MD5

      b22626ccc76a3766301343a12e59760a

    • SHA1

      1ff93c7865f1e90243faea3f8ed3e27b5eec17e9

    • SHA256

      8fdc45f1fa1dfc53dc1aa6450b7589c621b53415aeab1039faff42c43bd2cefa

    • SHA512

      a6d4a762e08ef33ceea2fb3f720147fb2395cb3116f4a7ca362679cb0a8a789d71a6e81ecd2eee05a533295704e239b61cd77fb8994f131315ae72613bb467e8

    • SSDEEP

      384:SPqKvj6yZ8xsDEHKt1OeI7D8/dc0w40UOt/J9+cLxrvnOAcDLX9:Sh9eyDEPJ7Dsct4MAKrt6j9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks