Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c832932f41167c7fffa792da6a191722_JaffaCakes118

  • Size

    956KB

  • Sample

    240829-el419asgkb

  • MD5

    c832932f41167c7fffa792da6a191722

  • SHA1

    ba4daebfe189d02aa4216ddc9cfffa13cfddd855

  • SHA256

    323b9ae96f915ed3a82822386422571a5d1ecc95e6b2946de20f1b6854d78a9c

  • SHA512

    f77af8efa83f9bf36128fde3d39a8881680a6044c2be7304d72af82a557e36fb5acad3a2b27329d139f65472e4c65eb87293cc2047744794970a0e64e1ae0118

  • SSDEEP

    24576:0WvAwYb0owPiRK7fuSJAREGdoXCZygwwpRtlTRK:JvAB3hSJEZoXQy/wpRtl1K

Score
7/10

Malware Config

Targets

    • Target

      wjjwzi.exe

    • Size

      960KB

    • MD5

      92d37d5da4173a00ee8c1a1ccb0ff71c

    • SHA1

      b3095cb2667f66edc54488f548341c041db5a745

    • SHA256

      d89b27e0c2b0e15797612c208baa5bbd0d1bbb53b3c694750b897627e48164ec

    • SHA512

      8007a9d3562c18f7e208938fdb52ba98f7109d0e00d419bcbfe8296c0dbf6827205528d275ebdb36cb4b6f9503320cf85c178c938ce2f995de85e392ea250035

    • SSDEEP

      24576:PNSIjE0L/fu5tIrhIQXnC1SWGxo2JtY6aushKJiJ:PNSIjE0L/fu5ANXnCzGxoB6ausn

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks