Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cb2b362c3fb0bee335ac936e893777ac_JaffaCakes118

  • Size

    574KB

  • Sample

    240830-tgvz4sselg

  • MD5

    cb2b362c3fb0bee335ac936e893777ac

  • SHA1

    2a9cb408e00439efb50facd7035e832a993a9419

  • SHA256

    7458ccc833c0eb641db1c99f6b3140be133e4abb6a907a3bddd00ab0a44deaec

  • SHA512

    251a486d2e359cf84f7546ab499a031a5699a77f0275a39ebecdf4cb85ad72506a269aeef142b0f81569923ef01cd6262d81dd45693745ef30d5b46be263f58e

  • SSDEEP

    12288:aAuiMOOMzQCR4UjDZ3Ckep1CCQMMvJyVb9l:nu36zQCR4UFBec3v

Malware Config

Targets

    • Target

      cb2b362c3fb0bee335ac936e893777ac_JaffaCakes118

    • Size

      574KB

    • MD5

      cb2b362c3fb0bee335ac936e893777ac

    • SHA1

      2a9cb408e00439efb50facd7035e832a993a9419

    • SHA256

      7458ccc833c0eb641db1c99f6b3140be133e4abb6a907a3bddd00ab0a44deaec

    • SHA512

      251a486d2e359cf84f7546ab499a031a5699a77f0275a39ebecdf4cb85ad72506a269aeef142b0f81569923ef01cd6262d81dd45693745ef30d5b46be263f58e

    • SSDEEP

      12288:aAuiMOOMzQCR4UjDZ3Ckep1CCQMMvJyVb9l:nu36zQCR4UFBec3v

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks