Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c026e501c46f2c3b9f0ca413943d2b39_JaffaCakes118

  • Size

    419KB

  • Sample

    240825-hbpela1fpr

  • MD5

    c026e501c46f2c3b9f0ca413943d2b39

  • SHA1

    b9fd3dee8747f1bfd81585c8c92869aaf8fc78d3

  • SHA256

    f971170b410f967d1108b58bee38b7b5a9965be4063435f782124ac89f239101

  • SHA512

    45f1bf1c57a4e2f933de0bbc807d6b9fe388d5295ef6280f49c28844ef66aaa8751afca14e7ba6c167fb67249fc2c82ede5a1dd7dc27f642a78303ff8fd9c2e5

  • SSDEEP

    6144:mLKL3Af375K/cKH2+f0T3Hy/LSvZQoH00ldK+pPMGyHb3bf3xwltFgUV1nVlVdne:SlKv0TC+RQoDlQ+pByHbVw7GRGZ1h

Malware Config

Targets

    • Target

      c026e501c46f2c3b9f0ca413943d2b39_JaffaCakes118

    • Size

      419KB

    • MD5

      c026e501c46f2c3b9f0ca413943d2b39

    • SHA1

      b9fd3dee8747f1bfd81585c8c92869aaf8fc78d3

    • SHA256

      f971170b410f967d1108b58bee38b7b5a9965be4063435f782124ac89f239101

    • SHA512

      45f1bf1c57a4e2f933de0bbc807d6b9fe388d5295ef6280f49c28844ef66aaa8751afca14e7ba6c167fb67249fc2c82ede5a1dd7dc27f642a78303ff8fd9c2e5

    • SSDEEP

      6144:mLKL3Af375K/cKH2+f0T3Hy/LSvZQoH00ldK+pPMGyHb3bf3xwltFgUV1nVlVdne:SlKv0TC+RQoDlQ+pByHbVw7GRGZ1h

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks