Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d0d6537f44c40a81501c00dd88438a94_JaffaCakes118

  • Size

    155KB

  • Sample

    240907-cb8kkszcja

  • MD5

    d0d6537f44c40a81501c00dd88438a94

  • SHA1

    4a3c9f8f334a36127d7825bc35d4cb942188bf7f

  • SHA256

    a08bfaffdfc4be38a43e9f92eb60fad0e6db3df631d437ca56b931f227f30d09

  • SHA512

    84883502b136e8a78f1a48c177ca30388ebde8d986959c67cfd040e7bbe030d3466ccc996e165781cbd128be374c0055b5d4c9e7324b0add6288f67331adf2ca

  • SSDEEP

    3072:UZb24yfkMY+BES09JXAnyrZalI+YfArtApV7:5sMYod+X3oI+YCAX7

Malware Config

Targets

    • Target

      d0d6537f44c40a81501c00dd88438a94_JaffaCakes118

    • Size

      155KB

    • MD5

      d0d6537f44c40a81501c00dd88438a94

    • SHA1

      4a3c9f8f334a36127d7825bc35d4cb942188bf7f

    • SHA256

      a08bfaffdfc4be38a43e9f92eb60fad0e6db3df631d437ca56b931f227f30d09

    • SHA512

      84883502b136e8a78f1a48c177ca30388ebde8d986959c67cfd040e7bbe030d3466ccc996e165781cbd128be374c0055b5d4c9e7324b0add6288f67331adf2ca

    • SSDEEP

      3072:UZb24yfkMY+BES09JXAnyrZalI+YfArtApV7:5sMYod+X3oI+YCAX7

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks