Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118

  • Size

    135KB

  • Sample

    240905-z9732azgmg

  • MD5

    cdfcb8482dea366655ab7a6510e38b95

  • SHA1

    13bed94301f5e02ac400e53cc1e6366ecc20e234

  • SHA256

    132faa0a540eed4da22938aa67d2960125f9c7f7e047b5238e26ef45b630caff

  • SHA512

    dad779162dad95b361a109c182c58edf4afd9f82853d0a4ac7a8e270c0f6335ee2a8b1e2747ed888038f43e484a4d16a792579408a8c3fccbbebea8ebc1c8647

  • SSDEEP

    1536:SNDX58zc+BwWarTdNFiHnhuzGjmplPnmeKk+iUnouy8tz4RiRM:SB5n+eWuMnECjOnmVkdkouttzcm

Malware Config

Targets

    • Target

      cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118

    • Size

      135KB

    • MD5

      cdfcb8482dea366655ab7a6510e38b95

    • SHA1

      13bed94301f5e02ac400e53cc1e6366ecc20e234

    • SHA256

      132faa0a540eed4da22938aa67d2960125f9c7f7e047b5238e26ef45b630caff

    • SHA512

      dad779162dad95b361a109c182c58edf4afd9f82853d0a4ac7a8e270c0f6335ee2a8b1e2747ed888038f43e484a4d16a792579408a8c3fccbbebea8ebc1c8647

    • SSDEEP

      1536:SNDX58zc+BwWarTdNFiHnhuzGjmplPnmeKk+iUnouy8tz4RiRM:SB5n+eWuMnECjOnmVkdkouttzcm

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks