Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b36a25a7f0b92dfba3a2d6320938c6b8_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240821-pewfms1enq

  • MD5

    b36a25a7f0b92dfba3a2d6320938c6b8

  • SHA1

    09698030231078824f10e40e475e7d8d9abc4b63

  • SHA256

    c6c4a148fd11dfba881b1e04509b229af378c4bc15c7c4ef8435fb7d23fa8966

  • SHA512

    d076cbf50b8981b8e1155c7de6bab5dc3c780ca0c8514609ed4865d1774df4bcc10cf7374ac5a1fadba6b4db11d22ced0068df83168de73b4c9bb8b582f3f613

  • SSDEEP

    24576:cQbz+mcdH5sY0DOMLiMXSspgE1vIXLYGXmRhzPchYUhER58q06jysYGKY9bCs6vB:J4dH58LLSspgE1v0LpQzPNdD06ofWCeA

Malware Config

Targets

    • Target

      b36a25a7f0b92dfba3a2d6320938c6b8_JaffaCakes118

    • Size

      1.5MB

    • MD5

      b36a25a7f0b92dfba3a2d6320938c6b8

    • SHA1

      09698030231078824f10e40e475e7d8d9abc4b63

    • SHA256

      c6c4a148fd11dfba881b1e04509b229af378c4bc15c7c4ef8435fb7d23fa8966

    • SHA512

      d076cbf50b8981b8e1155c7de6bab5dc3c780ca0c8514609ed4865d1774df4bcc10cf7374ac5a1fadba6b4db11d22ced0068df83168de73b4c9bb8b582f3f613

    • SSDEEP

      24576:cQbz+mcdH5sY0DOMLiMXSspgE1vIXLYGXmRhzPchYUhER58q06jysYGKY9bCs6vB:J4dH58LLSspgE1v0LpQzPNdD06ofWCeA

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks