Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118
-
Size
28KB
-
Sample
240907-le9rgsxalk
-
MD5
d19d1b9541762794b66283f5d1226a2f
-
SHA1
b2b59db42f41826b360577598208c59156ab098b
-
SHA256
b48c6de6a87924c9348af9bccd5e02845464b1de4944babf9ecc9afc6812c32c
-
SHA512
4d94174561cbb13cb487938d40cd922abc5abf8df2c6cfd4da88157240085af7b56dbba67d1b3fbcb59bfe79fa7f2b9a9207dcbb78c6cff6fb3b658a780d0188
-
SSDEEP
384:6jteo9CZPNvkjEzyAkI8xhETtAsOeoI/k4Io/X8Zo9XrvHmE4WACFmVkXaABM+lc:0eVPZkjEuA18iOnI7KYXrvHmkvmSXNB
Malware Config
Targets
-
-
Target
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118
-
Size
28KB
-
MD5
d19d1b9541762794b66283f5d1226a2f
-
SHA1
b2b59db42f41826b360577598208c59156ab098b
-
SHA256
b48c6de6a87924c9348af9bccd5e02845464b1de4944babf9ecc9afc6812c32c
-
SHA512
4d94174561cbb13cb487938d40cd922abc5abf8df2c6cfd4da88157240085af7b56dbba67d1b3fbcb59bfe79fa7f2b9a9207dcbb78c6cff6fb3b658a780d0188
-
SSDEEP
384:6jteo9CZPNvkjEzyAkI8xhETtAsOeoI/k4Io/X8Zo9XrvHmE4WACFmVkXaABM+lc:0eVPZkjEuA18iOnI7KYXrvHmkvmSXNB
Score9/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-