Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118

  • Size

    60KB

  • Sample

    240823-exy95svejf

  • MD5

    ba55a0fbd384dd9f0f91334ccbf65b21

  • SHA1

    8658a2c9987e2a9288e0fc255eba6cc53f9c8be7

  • SHA256

    738ba18a63893577c8d7729d81b869c3ba2cac605b4e26dc5ca351fcd575f2aa

  • SHA512

    8bafeff37436f22a8f62073f409ce46ebdc361da0719d70fc5c5eee6ade4f9c0754c153ac2a7fd56fea3ac99aa5973c6384e2c331897dea887b3b243193db18d

  • SSDEEP

    1536:gm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8UcdVRe7:b+sVT45mn/bjni8DBebXNA8UuQ7

Malware Config

Targets

    • Target

      ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118

    • Size

      60KB

    • MD5

      ba55a0fbd384dd9f0f91334ccbf65b21

    • SHA1

      8658a2c9987e2a9288e0fc255eba6cc53f9c8be7

    • SHA256

      738ba18a63893577c8d7729d81b869c3ba2cac605b4e26dc5ca351fcd575f2aa

    • SHA512

      8bafeff37436f22a8f62073f409ce46ebdc361da0719d70fc5c5eee6ade4f9c0754c153ac2a7fd56fea3ac99aa5973c6384e2c331897dea887b3b243193db18d

    • SSDEEP

      1536:gm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8UcdVRe7:b+sVT45mn/bjni8DBebXNA8UuQ7

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks