Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf3b291889020a85dd1a03a61ba02b51_JaffaCakes118

  • Size

    321KB

  • Sample

    240824-xwzhmawgjr

  • MD5

    bf3b291889020a85dd1a03a61ba02b51

  • SHA1

    7d3cd2e626c247b455087ace1a1fb7d0a3f55437

  • SHA256

    adf7695928a9042724559530c384dfd6ed0e11e32907613e0412343efb9110c4

  • SHA512

    c3c2239ab241ee4cd0d9bda50674cabf4ccc279d9ff38ea0032974a05d1ad65d5f1d4db2c520bc44622a671b557e612f0271cf4d3678dd6cb4f4c50b5814ef58

  • SSDEEP

    6144:cT+FQobd7OswMHScIOq1G/PyRnC2CkErfor:fFhbDycBqwyRC2gcr

Malware Config

Targets

    • Target

      bf3b291889020a85dd1a03a61ba02b51_JaffaCakes118

    • Size

      321KB

    • MD5

      bf3b291889020a85dd1a03a61ba02b51

    • SHA1

      7d3cd2e626c247b455087ace1a1fb7d0a3f55437

    • SHA256

      adf7695928a9042724559530c384dfd6ed0e11e32907613e0412343efb9110c4

    • SHA512

      c3c2239ab241ee4cd0d9bda50674cabf4ccc279d9ff38ea0032974a05d1ad65d5f1d4db2c520bc44622a671b557e612f0271cf4d3678dd6cb4f4c50b5814ef58

    • SSDEEP

      6144:cT+FQobd7OswMHScIOq1G/PyRnC2CkErfor:fFhbDycBqwyRC2gcr

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks