Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b2d25ffb01559adb44238297df15ee8c_JaffaCakes118

  • Size

    88KB

  • Sample

    240821-krax9atbjn

  • MD5

    b2d25ffb01559adb44238297df15ee8c

  • SHA1

    b7841197c92c6da6ad2292ba8fa8669920a0a3c1

  • SHA256

    4049668e0170e0902703690339323ace24174e8dd01686d9b51ebe3dd9ea4444

  • SHA512

    6a60fd8d0fd6ae473d10e57b9d0dfcf6d4df0cb641b94e08e8a9e634eb75419d7ef8958090ee2c9637bc48fe7c90a87b224f4588c407df3ad098c71afbaaf795

  • SSDEEP

    1536:MfftWR8o/u7vrCqnF+4TtD9uWeLQax3ML/wl4b7o:MHcZu7veSJunLbm/wlA7o

Malware Config

Targets

    • Target

      b2d25ffb01559adb44238297df15ee8c_JaffaCakes118

    • Size

      88KB

    • MD5

      b2d25ffb01559adb44238297df15ee8c

    • SHA1

      b7841197c92c6da6ad2292ba8fa8669920a0a3c1

    • SHA256

      4049668e0170e0902703690339323ace24174e8dd01686d9b51ebe3dd9ea4444

    • SHA512

      6a60fd8d0fd6ae473d10e57b9d0dfcf6d4df0cb641b94e08e8a9e634eb75419d7ef8958090ee2c9637bc48fe7c90a87b224f4588c407df3ad098c71afbaaf795

    • SSDEEP

      1536:MfftWR8o/u7vrCqnF+4TtD9uWeLQax3ML/wl4b7o:MHcZu7veSJunLbm/wlA7o

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks