Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b306ff9927251c40c34fe6bfef07756b_JaffaCakes118

  • Size

    476KB

  • Sample

    240821-l19zdawcjq

  • MD5

    b306ff9927251c40c34fe6bfef07756b

  • SHA1

    8d6975fc095b7a96393d61a63fb610d71931666a

  • SHA256

    65083234a079905c3b945cb178388dc287c2521ef59817885f1cc2e522a68db7

  • SHA512

    08e633e2d43f13cb748f67378a777cc124f693815f63ed5a3a64ad2ebe11001145a01f83d9d3bddc0f9f590677ee6bcfeabeb5a259b10b426344961e333b3996

  • SSDEEP

    6144:4HKp19Im2Eebfb8t/OVlyzw2JPUU/MV8NIByAy:R19pGf6YlyF+y

Malware Config

Targets

    • Target

      b306ff9927251c40c34fe6bfef07756b_JaffaCakes118

    • Size

      476KB

    • MD5

      b306ff9927251c40c34fe6bfef07756b

    • SHA1

      8d6975fc095b7a96393d61a63fb610d71931666a

    • SHA256

      65083234a079905c3b945cb178388dc287c2521ef59817885f1cc2e522a68db7

    • SHA512

      08e633e2d43f13cb748f67378a777cc124f693815f63ed5a3a64ad2ebe11001145a01f83d9d3bddc0f9f590677ee6bcfeabeb5a259b10b426344961e333b3996

    • SSDEEP

      6144:4HKp19Im2Eebfb8t/OVlyzw2JPUU/MV8NIByAy:R19pGf6YlyF+y

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks